1 /****************************************************************************** 2 * 3 * This file is provided under a dual BSD/GPLv2 license. When using or 4 * redistributing this file, you may do so under either license. 5 * 6 * GPL LICENSE SUMMARY 7 * 8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 9 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH 10 * Copyright(c) 2016 - 2017 Intel Deutschland GmbH 11 * 12 * This program is free software; you can redistribute it and/or modify 13 * it under the terms of version 2 of the GNU General Public License as 14 * published by the Free Software Foundation. 15 * 16 * This program is distributed in the hope that it will be useful, but 17 * WITHOUT ANY WARRANTY; without even the implied warranty of 18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 19 * General Public License for more details. 20 * 21 * You should have received a copy of the GNU General Public License 22 * along with this program; if not, write to the Free Software 23 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, 24 * USA 25 * 26 * The full GNU General Public License is included in this distribution 27 * in the file called COPYING. 28 * 29 * Contact Information: 30 * Intel Linux Wireless <linuxwifi@intel.com> 31 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 32 * 33 * BSD LICENSE 34 * 35 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 36 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH 37 * Copyright(c) 2016 - 2017 Intel Deutschland GmbH 38 * All rights reserved. 39 * 40 * Redistribution and use in source and binary forms, with or without 41 * modification, are permitted provided that the following conditions 42 * are met: 43 * 44 * * Redistributions of source code must retain the above copyright 45 * notice, this list of conditions and the following disclaimer. 46 * * Redistributions in binary form must reproduce the above copyright 47 * notice, this list of conditions and the following disclaimer in 48 * the documentation and/or other materials provided with the 49 * distribution. 50 * * Neither the name Intel Corporation nor the names of its 51 * contributors may be used to endorse or promote products derived 52 * from this software without specific prior written permission. 53 * 54 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 55 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 56 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 57 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 58 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 59 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 60 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 61 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 62 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 63 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 64 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 65 * 66 *****************************************************************************/ 67 #include <linux/kernel.h> 68 #include <linux/slab.h> 69 #include <linux/skbuff.h> 70 #include <linux/netdevice.h> 71 #include <linux/etherdevice.h> 72 #include <linux/ip.h> 73 #include <linux/if_arp.h> 74 #include <linux/time.h> 75 #include <net/mac80211.h> 76 #include <net/ieee80211_radiotap.h> 77 #include <net/tcp.h> 78 79 #include "iwl-op-mode.h" 80 #include "iwl-io.h" 81 #include "mvm.h" 82 #include "sta.h" 83 #include "time-event.h" 84 #include "iwl-eeprom-parse.h" 85 #include "iwl-phy-db.h" 86 #include "testmode.h" 87 #include "fw/error-dump.h" 88 #include "iwl-prph.h" 89 #include "iwl-nvm-parse.h" 90 #include "fw-dbg.h" 91 92 static const struct ieee80211_iface_limit iwl_mvm_limits[] = { 93 { 94 .max = 1, 95 .types = BIT(NL80211_IFTYPE_STATION), 96 }, 97 { 98 .max = 1, 99 .types = BIT(NL80211_IFTYPE_AP) | 100 BIT(NL80211_IFTYPE_P2P_CLIENT) | 101 BIT(NL80211_IFTYPE_P2P_GO), 102 }, 103 { 104 .max = 1, 105 .types = BIT(NL80211_IFTYPE_P2P_DEVICE), 106 }, 107 }; 108 109 static const struct ieee80211_iface_combination iwl_mvm_iface_combinations[] = { 110 { 111 .num_different_channels = 2, 112 .max_interfaces = 3, 113 .limits = iwl_mvm_limits, 114 .n_limits = ARRAY_SIZE(iwl_mvm_limits), 115 }, 116 }; 117 118 #ifdef CONFIG_PM_SLEEP 119 static const struct nl80211_wowlan_tcp_data_token_feature 120 iwl_mvm_wowlan_tcp_token_feature = { 121 .min_len = 0, 122 .max_len = 255, 123 .bufsize = IWL_WOWLAN_REMOTE_WAKE_MAX_TOKENS, 124 }; 125 126 static const struct wiphy_wowlan_tcp_support iwl_mvm_wowlan_tcp_support = { 127 .tok = &iwl_mvm_wowlan_tcp_token_feature, 128 .data_payload_max = IWL_WOWLAN_TCP_MAX_PACKET_LEN - 129 sizeof(struct ethhdr) - 130 sizeof(struct iphdr) - 131 sizeof(struct tcphdr), 132 .data_interval_max = 65535, /* __le16 in API */ 133 .wake_payload_max = IWL_WOWLAN_REMOTE_WAKE_MAX_PACKET_LEN - 134 sizeof(struct ethhdr) - 135 sizeof(struct iphdr) - 136 sizeof(struct tcphdr), 137 .seq = true, 138 }; 139 #endif 140 141 #ifdef CONFIG_IWLWIFI_BCAST_FILTERING 142 /* 143 * Use the reserved field to indicate magic values. 144 * these values will only be used internally by the driver, 145 * and won't make it to the fw (reserved will be 0). 146 * BC_FILTER_MAGIC_IP - configure the val of this attribute to 147 * be the vif's ip address. in case there is not a single 148 * ip address (0, or more than 1), this attribute will 149 * be skipped. 150 * BC_FILTER_MAGIC_MAC - set the val of this attribute to 151 * the LSB bytes of the vif's mac address 152 */ 153 enum { 154 BC_FILTER_MAGIC_NONE = 0, 155 BC_FILTER_MAGIC_IP, 156 BC_FILTER_MAGIC_MAC, 157 }; 158 159 static const struct iwl_fw_bcast_filter iwl_mvm_default_bcast_filters[] = { 160 { 161 /* arp */ 162 .discard = 0, 163 .frame_type = BCAST_FILTER_FRAME_TYPE_ALL, 164 .attrs = { 165 { 166 /* frame type - arp, hw type - ethernet */ 167 .offset_type = 168 BCAST_FILTER_OFFSET_PAYLOAD_START, 169 .offset = sizeof(rfc1042_header), 170 .val = cpu_to_be32(0x08060001), 171 .mask = cpu_to_be32(0xffffffff), 172 }, 173 { 174 /* arp dest ip */ 175 .offset_type = 176 BCAST_FILTER_OFFSET_PAYLOAD_START, 177 .offset = sizeof(rfc1042_header) + 2 + 178 sizeof(struct arphdr) + 179 ETH_ALEN + sizeof(__be32) + 180 ETH_ALEN, 181 .mask = cpu_to_be32(0xffffffff), 182 /* mark it as special field */ 183 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_IP), 184 }, 185 }, 186 }, 187 { 188 /* dhcp offer bcast */ 189 .discard = 0, 190 .frame_type = BCAST_FILTER_FRAME_TYPE_IPV4, 191 .attrs = { 192 { 193 /* udp dest port - 68 (bootp client)*/ 194 .offset_type = BCAST_FILTER_OFFSET_IP_END, 195 .offset = offsetof(struct udphdr, dest), 196 .val = cpu_to_be32(0x00440000), 197 .mask = cpu_to_be32(0xffff0000), 198 }, 199 { 200 /* dhcp - lsb bytes of client hw address */ 201 .offset_type = BCAST_FILTER_OFFSET_IP_END, 202 .offset = 38, 203 .mask = cpu_to_be32(0xffffffff), 204 /* mark it as special field */ 205 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_MAC), 206 }, 207 }, 208 }, 209 /* last filter must be empty */ 210 {}, 211 }; 212 #endif 213 214 void iwl_mvm_ref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type) 215 { 216 if (!iwl_mvm_is_d0i3_supported(mvm)) 217 return; 218 219 IWL_DEBUG_RPM(mvm, "Take mvm reference - type %d\n", ref_type); 220 spin_lock_bh(&mvm->refs_lock); 221 mvm->refs[ref_type]++; 222 spin_unlock_bh(&mvm->refs_lock); 223 iwl_trans_ref(mvm->trans); 224 } 225 226 void iwl_mvm_unref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type) 227 { 228 if (!iwl_mvm_is_d0i3_supported(mvm)) 229 return; 230 231 IWL_DEBUG_RPM(mvm, "Leave mvm reference - type %d\n", ref_type); 232 spin_lock_bh(&mvm->refs_lock); 233 if (WARN_ON(!mvm->refs[ref_type])) { 234 spin_unlock_bh(&mvm->refs_lock); 235 return; 236 } 237 mvm->refs[ref_type]--; 238 spin_unlock_bh(&mvm->refs_lock); 239 iwl_trans_unref(mvm->trans); 240 } 241 242 static void iwl_mvm_unref_all_except(struct iwl_mvm *mvm, 243 enum iwl_mvm_ref_type except_ref) 244 { 245 int i, j; 246 247 if (!iwl_mvm_is_d0i3_supported(mvm)) 248 return; 249 250 spin_lock_bh(&mvm->refs_lock); 251 for (i = 0; i < IWL_MVM_REF_COUNT; i++) { 252 if (except_ref == i || !mvm->refs[i]) 253 continue; 254 255 IWL_DEBUG_RPM(mvm, "Cleanup: remove mvm ref type %d (%d)\n", 256 i, mvm->refs[i]); 257 for (j = 0; j < mvm->refs[i]; j++) 258 iwl_trans_unref(mvm->trans); 259 mvm->refs[i] = 0; 260 } 261 spin_unlock_bh(&mvm->refs_lock); 262 } 263 264 bool iwl_mvm_ref_taken(struct iwl_mvm *mvm) 265 { 266 int i; 267 bool taken = false; 268 269 if (!iwl_mvm_is_d0i3_supported(mvm)) 270 return true; 271 272 spin_lock_bh(&mvm->refs_lock); 273 for (i = 0; i < IWL_MVM_REF_COUNT; i++) { 274 if (mvm->refs[i]) { 275 taken = true; 276 break; 277 } 278 } 279 spin_unlock_bh(&mvm->refs_lock); 280 281 return taken; 282 } 283 284 int iwl_mvm_ref_sync(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type) 285 { 286 iwl_mvm_ref(mvm, ref_type); 287 288 if (!wait_event_timeout(mvm->d0i3_exit_waitq, 289 !test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status), 290 HZ)) { 291 WARN_ON_ONCE(1); 292 iwl_mvm_unref(mvm, ref_type); 293 return -EIO; 294 } 295 296 return 0; 297 } 298 299 static void iwl_mvm_reset_phy_ctxts(struct iwl_mvm *mvm) 300 { 301 int i; 302 303 memset(mvm->phy_ctxts, 0, sizeof(mvm->phy_ctxts)); 304 for (i = 0; i < NUM_PHY_CTX; i++) { 305 mvm->phy_ctxts[i].id = i; 306 mvm->phy_ctxts[i].ref = 0; 307 } 308 } 309 310 struct ieee80211_regdomain *iwl_mvm_get_regdomain(struct wiphy *wiphy, 311 const char *alpha2, 312 enum iwl_mcc_source src_id, 313 bool *changed) 314 { 315 struct ieee80211_regdomain *regd = NULL; 316 struct ieee80211_hw *hw = wiphy_to_ieee80211_hw(wiphy); 317 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 318 struct iwl_mcc_update_resp *resp; 319 320 IWL_DEBUG_LAR(mvm, "Getting regdomain data for %s from FW\n", alpha2); 321 322 lockdep_assert_held(&mvm->mutex); 323 324 resp = iwl_mvm_update_mcc(mvm, alpha2, src_id); 325 if (IS_ERR_OR_NULL(resp)) { 326 IWL_DEBUG_LAR(mvm, "Could not get update from FW %d\n", 327 PTR_ERR_OR_ZERO(resp)); 328 goto out; 329 } 330 331 if (changed) 332 *changed = (resp->status == MCC_RESP_NEW_CHAN_PROFILE); 333 334 regd = iwl_parse_nvm_mcc_info(mvm->trans->dev, mvm->cfg, 335 __le32_to_cpu(resp->n_channels), 336 resp->channels, 337 __le16_to_cpu(resp->mcc)); 338 /* Store the return source id */ 339 src_id = resp->source_id; 340 kfree(resp); 341 if (IS_ERR_OR_NULL(regd)) { 342 IWL_DEBUG_LAR(mvm, "Could not get parse update from FW %d\n", 343 PTR_ERR_OR_ZERO(regd)); 344 goto out; 345 } 346 347 IWL_DEBUG_LAR(mvm, "setting alpha2 from FW to %s (0x%x, 0x%x) src=%d\n", 348 regd->alpha2, regd->alpha2[0], regd->alpha2[1], src_id); 349 mvm->lar_regdom_set = true; 350 mvm->mcc_src = src_id; 351 352 out: 353 return regd; 354 } 355 356 void iwl_mvm_update_changed_regdom(struct iwl_mvm *mvm) 357 { 358 bool changed; 359 struct ieee80211_regdomain *regd; 360 361 if (!iwl_mvm_is_lar_supported(mvm)) 362 return; 363 364 regd = iwl_mvm_get_current_regdomain(mvm, &changed); 365 if (!IS_ERR_OR_NULL(regd)) { 366 /* only update the regulatory core if changed */ 367 if (changed) 368 regulatory_set_wiphy_regd(mvm->hw->wiphy, regd); 369 370 kfree(regd); 371 } 372 } 373 374 struct ieee80211_regdomain *iwl_mvm_get_current_regdomain(struct iwl_mvm *mvm, 375 bool *changed) 376 { 377 return iwl_mvm_get_regdomain(mvm->hw->wiphy, "ZZ", 378 iwl_mvm_is_wifi_mcc_supported(mvm) ? 379 MCC_SOURCE_GET_CURRENT : 380 MCC_SOURCE_OLD_FW, changed); 381 } 382 383 int iwl_mvm_init_fw_regd(struct iwl_mvm *mvm) 384 { 385 enum iwl_mcc_source used_src; 386 struct ieee80211_regdomain *regd; 387 int ret; 388 bool changed; 389 const struct ieee80211_regdomain *r = 390 rtnl_dereference(mvm->hw->wiphy->regd); 391 392 if (!r) 393 return -ENOENT; 394 395 /* save the last source in case we overwrite it below */ 396 used_src = mvm->mcc_src; 397 if (iwl_mvm_is_wifi_mcc_supported(mvm)) { 398 /* Notify the firmware we support wifi location updates */ 399 regd = iwl_mvm_get_current_regdomain(mvm, NULL); 400 if (!IS_ERR_OR_NULL(regd)) 401 kfree(regd); 402 } 403 404 /* Now set our last stored MCC and source */ 405 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, r->alpha2, used_src, 406 &changed); 407 if (IS_ERR_OR_NULL(regd)) 408 return -EIO; 409 410 /* update cfg80211 if the regdomain was changed */ 411 if (changed) 412 ret = regulatory_set_wiphy_regd_sync_rtnl(mvm->hw->wiphy, regd); 413 else 414 ret = 0; 415 416 kfree(regd); 417 return ret; 418 } 419 420 int iwl_mvm_mac_setup_register(struct iwl_mvm *mvm) 421 { 422 struct ieee80211_hw *hw = mvm->hw; 423 int num_mac, ret, i; 424 static const u32 mvm_ciphers[] = { 425 WLAN_CIPHER_SUITE_WEP40, 426 WLAN_CIPHER_SUITE_WEP104, 427 WLAN_CIPHER_SUITE_TKIP, 428 WLAN_CIPHER_SUITE_CCMP, 429 }; 430 431 /* Tell mac80211 our characteristics */ 432 ieee80211_hw_set(hw, SIGNAL_DBM); 433 ieee80211_hw_set(hw, SPECTRUM_MGMT); 434 ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS); 435 ieee80211_hw_set(hw, QUEUE_CONTROL); 436 ieee80211_hw_set(hw, WANT_MONITOR_VIF); 437 ieee80211_hw_set(hw, SUPPORTS_PS); 438 ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS); 439 ieee80211_hw_set(hw, AMPDU_AGGREGATION); 440 ieee80211_hw_set(hw, TIMING_BEACON_ONLY); 441 ieee80211_hw_set(hw, CONNECTION_MONITOR); 442 ieee80211_hw_set(hw, CHANCTX_STA_CSA); 443 ieee80211_hw_set(hw, SUPPORT_FAST_XMIT); 444 ieee80211_hw_set(hw, SUPPORTS_CLONED_SKBS); 445 ieee80211_hw_set(hw, SUPPORTS_AMSDU_IN_AMPDU); 446 ieee80211_hw_set(hw, NEEDS_UNIQUE_STA_ADDR); 447 if (iwl_mvm_has_new_rx_api(mvm)) 448 ieee80211_hw_set(hw, SUPPORTS_REORDERING_BUFFER); 449 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_STA_PM_NOTIF)) 450 ieee80211_hw_set(hw, AP_LINK_PS); 451 452 if (mvm->trans->num_rx_queues > 1) 453 ieee80211_hw_set(hw, USES_RSS); 454 455 if (mvm->trans->max_skb_frags) 456 hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG; 457 458 if (!iwl_mvm_is_dqa_supported(mvm)) 459 hw->queues = mvm->first_agg_queue; 460 else 461 hw->queues = IEEE80211_MAX_QUEUES; 462 hw->offchannel_tx_hw_queue = IWL_MVM_OFFCHANNEL_QUEUE; 463 hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FEC | 464 IEEE80211_RADIOTAP_MCS_HAVE_STBC; 465 hw->radiotap_vht_details |= IEEE80211_RADIOTAP_VHT_KNOWN_STBC | 466 IEEE80211_RADIOTAP_VHT_KNOWN_BEAMFORMED; 467 468 hw->radiotap_timestamp.units_pos = 469 IEEE80211_RADIOTAP_TIMESTAMP_UNIT_US | 470 IEEE80211_RADIOTAP_TIMESTAMP_SPOS_PLCP_SIG_ACQ; 471 /* this is the case for CCK frames, it's better (only 8) for OFDM */ 472 hw->radiotap_timestamp.accuracy = 22; 473 474 hw->rate_control_algorithm = "iwl-mvm-rs"; 475 hw->uapsd_queues = IWL_MVM_UAPSD_QUEUES; 476 hw->uapsd_max_sp_len = IWL_UAPSD_MAX_SP; 477 478 BUILD_BUG_ON(ARRAY_SIZE(mvm->ciphers) < ARRAY_SIZE(mvm_ciphers) + 6); 479 memcpy(mvm->ciphers, mvm_ciphers, sizeof(mvm_ciphers)); 480 hw->wiphy->n_cipher_suites = ARRAY_SIZE(mvm_ciphers); 481 hw->wiphy->cipher_suites = mvm->ciphers; 482 483 if (iwl_mvm_has_new_rx_api(mvm)) { 484 mvm->ciphers[hw->wiphy->n_cipher_suites] = 485 WLAN_CIPHER_SUITE_GCMP; 486 hw->wiphy->n_cipher_suites++; 487 mvm->ciphers[hw->wiphy->n_cipher_suites] = 488 WLAN_CIPHER_SUITE_GCMP_256; 489 hw->wiphy->n_cipher_suites++; 490 } 491 492 /* Enable 11w if software crypto is not enabled (as the 493 * firmware will interpret some mgmt packets, so enabling it 494 * with software crypto isn't safe). 495 */ 496 if (!iwlwifi_mod_params.swcrypto) { 497 ieee80211_hw_set(hw, MFP_CAPABLE); 498 mvm->ciphers[hw->wiphy->n_cipher_suites] = 499 WLAN_CIPHER_SUITE_AES_CMAC; 500 hw->wiphy->n_cipher_suites++; 501 if (iwl_mvm_has_new_rx_api(mvm)) { 502 mvm->ciphers[hw->wiphy->n_cipher_suites] = 503 WLAN_CIPHER_SUITE_BIP_GMAC_128; 504 hw->wiphy->n_cipher_suites++; 505 mvm->ciphers[hw->wiphy->n_cipher_suites] = 506 WLAN_CIPHER_SUITE_BIP_GMAC_256; 507 hw->wiphy->n_cipher_suites++; 508 } 509 } 510 511 /* currently FW API supports only one optional cipher scheme */ 512 if (mvm->fw->cs[0].cipher) { 513 const struct iwl_fw_cipher_scheme *fwcs = &mvm->fw->cs[0]; 514 struct ieee80211_cipher_scheme *cs = &mvm->cs[0]; 515 516 mvm->hw->n_cipher_schemes = 1; 517 518 cs->cipher = le32_to_cpu(fwcs->cipher); 519 cs->iftype = BIT(NL80211_IFTYPE_STATION); 520 cs->hdr_len = fwcs->hdr_len; 521 cs->pn_len = fwcs->pn_len; 522 cs->pn_off = fwcs->pn_off; 523 cs->key_idx_off = fwcs->key_idx_off; 524 cs->key_idx_mask = fwcs->key_idx_mask; 525 cs->key_idx_shift = fwcs->key_idx_shift; 526 cs->mic_len = fwcs->mic_len; 527 528 mvm->hw->cipher_schemes = mvm->cs; 529 mvm->ciphers[hw->wiphy->n_cipher_suites] = cs->cipher; 530 hw->wiphy->n_cipher_suites++; 531 } 532 533 ieee80211_hw_set(hw, SINGLE_SCAN_ON_ALL_BANDS); 534 hw->wiphy->features |= 535 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR | 536 NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR | 537 NL80211_FEATURE_ND_RANDOM_MAC_ADDR; 538 539 hw->sta_data_size = sizeof(struct iwl_mvm_sta); 540 hw->vif_data_size = sizeof(struct iwl_mvm_vif); 541 hw->chanctx_data_size = sizeof(u16); 542 543 hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) | 544 BIT(NL80211_IFTYPE_P2P_CLIENT) | 545 BIT(NL80211_IFTYPE_AP) | 546 BIT(NL80211_IFTYPE_P2P_GO) | 547 BIT(NL80211_IFTYPE_P2P_DEVICE) | 548 BIT(NL80211_IFTYPE_ADHOC); 549 550 hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN; 551 hw->wiphy->regulatory_flags |= REGULATORY_ENABLE_RELAX_NO_IR; 552 if (iwl_mvm_is_lar_supported(mvm)) 553 hw->wiphy->regulatory_flags |= REGULATORY_WIPHY_SELF_MANAGED; 554 else 555 hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG | 556 REGULATORY_DISABLE_BEACON_HINTS; 557 558 hw->wiphy->flags |= WIPHY_FLAG_AP_UAPSD; 559 hw->wiphy->flags |= WIPHY_FLAG_HAS_CHANNEL_SWITCH; 560 561 hw->wiphy->iface_combinations = iwl_mvm_iface_combinations; 562 hw->wiphy->n_iface_combinations = 563 ARRAY_SIZE(iwl_mvm_iface_combinations); 564 565 hw->wiphy->max_remain_on_channel_duration = 10000; 566 hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL; 567 /* we can compensate an offset of up to 3 channels = 15 MHz */ 568 hw->wiphy->max_adj_channel_rssi_comp = 3 * 5; 569 570 /* Extract MAC address */ 571 memcpy(mvm->addresses[0].addr, mvm->nvm_data->hw_addr, ETH_ALEN); 572 hw->wiphy->addresses = mvm->addresses; 573 hw->wiphy->n_addresses = 1; 574 575 /* Extract additional MAC addresses if available */ 576 num_mac = (mvm->nvm_data->n_hw_addrs > 1) ? 577 min(IWL_MVM_MAX_ADDRESSES, mvm->nvm_data->n_hw_addrs) : 1; 578 579 for (i = 1; i < num_mac; i++) { 580 memcpy(mvm->addresses[i].addr, mvm->addresses[i-1].addr, 581 ETH_ALEN); 582 mvm->addresses[i].addr[5]++; 583 hw->wiphy->n_addresses++; 584 } 585 586 iwl_mvm_reset_phy_ctxts(mvm); 587 588 hw->wiphy->max_scan_ie_len = iwl_mvm_max_scan_ie_len(mvm); 589 590 hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX; 591 592 BUILD_BUG_ON(IWL_MVM_SCAN_STOPPING_MASK & IWL_MVM_SCAN_MASK); 593 BUILD_BUG_ON(IWL_MVM_MAX_UMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK) || 594 IWL_MVM_MAX_LMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK)); 595 596 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) 597 mvm->max_scans = IWL_MVM_MAX_UMAC_SCANS; 598 else 599 mvm->max_scans = IWL_MVM_MAX_LMAC_SCANS; 600 601 if (mvm->nvm_data->bands[NL80211_BAND_2GHZ].n_channels) 602 hw->wiphy->bands[NL80211_BAND_2GHZ] = 603 &mvm->nvm_data->bands[NL80211_BAND_2GHZ]; 604 if (mvm->nvm_data->bands[NL80211_BAND_5GHZ].n_channels) { 605 hw->wiphy->bands[NL80211_BAND_5GHZ] = 606 &mvm->nvm_data->bands[NL80211_BAND_5GHZ]; 607 608 if (fw_has_capa(&mvm->fw->ucode_capa, 609 IWL_UCODE_TLV_CAPA_BEAMFORMER) && 610 fw_has_api(&mvm->fw->ucode_capa, 611 IWL_UCODE_TLV_API_LQ_SS_PARAMS)) 612 hw->wiphy->bands[NL80211_BAND_5GHZ]->vht_cap.cap |= 613 IEEE80211_VHT_CAP_SU_BEAMFORMER_CAPABLE; 614 } 615 616 hw->wiphy->hw_version = mvm->trans->hw_id; 617 618 if (iwlmvm_mod_params.power_scheme != IWL_POWER_SCHEME_CAM) 619 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT; 620 else 621 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT; 622 623 hw->wiphy->max_sched_scan_reqs = 1; 624 hw->wiphy->max_sched_scan_ssids = PROBE_OPTION_MAX; 625 hw->wiphy->max_match_sets = IWL_SCAN_MAX_PROFILES; 626 /* we create the 802.11 header and zero length SSID IE. */ 627 hw->wiphy->max_sched_scan_ie_len = 628 SCAN_OFFLOAD_PROBE_REQ_SIZE - 24 - 2; 629 hw->wiphy->max_sched_scan_plans = IWL_MAX_SCHED_SCAN_PLANS; 630 hw->wiphy->max_sched_scan_plan_interval = U16_MAX; 631 632 /* 633 * the firmware uses u8 for num of iterations, but 0xff is saved for 634 * infinite loop, so the maximum number of iterations is actually 254. 635 */ 636 hw->wiphy->max_sched_scan_plan_iterations = 254; 637 638 hw->wiphy->features |= NL80211_FEATURE_P2P_GO_CTWIN | 639 NL80211_FEATURE_LOW_PRIORITY_SCAN | 640 NL80211_FEATURE_P2P_GO_OPPPS | 641 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE | 642 NL80211_FEATURE_DYNAMIC_SMPS | 643 NL80211_FEATURE_STATIC_SMPS | 644 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION; 645 646 if (fw_has_capa(&mvm->fw->ucode_capa, 647 IWL_UCODE_TLV_CAPA_TXPOWER_INSERTION_SUPPORT)) 648 hw->wiphy->features |= NL80211_FEATURE_TX_POWER_INSERTION; 649 if (fw_has_capa(&mvm->fw->ucode_capa, 650 IWL_UCODE_TLV_CAPA_QUIET_PERIOD_SUPPORT)) 651 hw->wiphy->features |= NL80211_FEATURE_QUIET; 652 653 if (fw_has_capa(&mvm->fw->ucode_capa, 654 IWL_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT)) 655 hw->wiphy->features |= 656 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES; 657 658 if (fw_has_capa(&mvm->fw->ucode_capa, 659 IWL_UCODE_TLV_CAPA_WFA_TPC_REP_IE_SUPPORT)) 660 hw->wiphy->features |= NL80211_FEATURE_WFA_TPC_IE_IN_PROBES; 661 662 if (fw_has_api(&mvm->fw->ucode_capa, 663 IWL_UCODE_TLV_API_SCAN_TSF_REPORT)) { 664 wiphy_ext_feature_set(hw->wiphy, 665 NL80211_EXT_FEATURE_SCAN_START_TIME); 666 wiphy_ext_feature_set(hw->wiphy, 667 NL80211_EXT_FEATURE_BSS_PARENT_TSF); 668 wiphy_ext_feature_set(hw->wiphy, 669 NL80211_EXT_FEATURE_SET_SCAN_DWELL); 670 } 671 672 mvm->rts_threshold = IEEE80211_MAX_RTS_THRESHOLD; 673 674 #ifdef CONFIG_PM_SLEEP 675 if (iwl_mvm_is_d0i3_supported(mvm) && 676 device_can_wakeup(mvm->trans->dev)) { 677 mvm->wowlan.flags = WIPHY_WOWLAN_ANY; 678 hw->wiphy->wowlan = &mvm->wowlan; 679 } 680 681 if (mvm->fw->img[IWL_UCODE_WOWLAN].num_sec && 682 mvm->trans->ops->d3_suspend && 683 mvm->trans->ops->d3_resume && 684 device_can_wakeup(mvm->trans->dev)) { 685 mvm->wowlan.flags |= WIPHY_WOWLAN_MAGIC_PKT | 686 WIPHY_WOWLAN_DISCONNECT | 687 WIPHY_WOWLAN_EAP_IDENTITY_REQ | 688 WIPHY_WOWLAN_RFKILL_RELEASE | 689 WIPHY_WOWLAN_NET_DETECT; 690 if (!iwlwifi_mod_params.swcrypto) 691 mvm->wowlan.flags |= WIPHY_WOWLAN_SUPPORTS_GTK_REKEY | 692 WIPHY_WOWLAN_GTK_REKEY_FAILURE | 693 WIPHY_WOWLAN_4WAY_HANDSHAKE; 694 695 mvm->wowlan.n_patterns = IWL_WOWLAN_MAX_PATTERNS; 696 mvm->wowlan.pattern_min_len = IWL_WOWLAN_MIN_PATTERN_LEN; 697 mvm->wowlan.pattern_max_len = IWL_WOWLAN_MAX_PATTERN_LEN; 698 mvm->wowlan.max_nd_match_sets = IWL_SCAN_MAX_PROFILES; 699 mvm->wowlan.tcp = &iwl_mvm_wowlan_tcp_support; 700 hw->wiphy->wowlan = &mvm->wowlan; 701 } 702 #endif 703 704 #ifdef CONFIG_IWLWIFI_BCAST_FILTERING 705 /* assign default bcast filtering configuration */ 706 mvm->bcast_filters = iwl_mvm_default_bcast_filters; 707 #endif 708 709 ret = iwl_mvm_leds_init(mvm); 710 if (ret) 711 return ret; 712 713 if (fw_has_capa(&mvm->fw->ucode_capa, 714 IWL_UCODE_TLV_CAPA_TDLS_SUPPORT)) { 715 IWL_DEBUG_TDLS(mvm, "TDLS supported\n"); 716 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS; 717 ieee80211_hw_set(hw, TDLS_WIDER_BW); 718 } 719 720 if (fw_has_capa(&mvm->fw->ucode_capa, 721 IWL_UCODE_TLV_CAPA_TDLS_CHANNEL_SWITCH)) { 722 IWL_DEBUG_TDLS(mvm, "TDLS channel switch supported\n"); 723 hw->wiphy->features |= NL80211_FEATURE_TDLS_CHANNEL_SWITCH; 724 } 725 726 hw->netdev_features |= mvm->cfg->features; 727 if (!iwl_mvm_is_csum_supported(mvm)) { 728 hw->netdev_features &= ~(IWL_TX_CSUM_NETIF_FLAGS | 729 NETIF_F_RXCSUM); 730 /* We may support SW TX CSUM */ 731 if (IWL_MVM_SW_TX_CSUM_OFFLOAD) 732 hw->netdev_features |= IWL_TX_CSUM_NETIF_FLAGS; 733 } 734 735 ret = ieee80211_register_hw(mvm->hw); 736 if (ret) 737 iwl_mvm_leds_exit(mvm); 738 mvm->init_status |= IWL_MVM_INIT_STATUS_REG_HW_INIT_COMPLETE; 739 740 if (mvm->cfg->vht_mu_mimo_supported) 741 wiphy_ext_feature_set(hw->wiphy, 742 NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER); 743 744 return ret; 745 } 746 747 static bool iwl_mvm_defer_tx(struct iwl_mvm *mvm, 748 struct ieee80211_sta *sta, 749 struct sk_buff *skb) 750 { 751 struct iwl_mvm_sta *mvmsta; 752 bool defer = false; 753 754 /* 755 * double check the IN_D0I3 flag both before and after 756 * taking the spinlock, in order to prevent taking 757 * the spinlock when not needed. 758 */ 759 if (likely(!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status))) 760 return false; 761 762 spin_lock(&mvm->d0i3_tx_lock); 763 /* 764 * testing the flag again ensures the skb dequeue 765 * loop (on d0i3 exit) hasn't run yet. 766 */ 767 if (!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status)) 768 goto out; 769 770 mvmsta = iwl_mvm_sta_from_mac80211(sta); 771 if (mvmsta->sta_id == IWL_MVM_INVALID_STA || 772 mvmsta->sta_id != mvm->d0i3_ap_sta_id) 773 goto out; 774 775 __skb_queue_tail(&mvm->d0i3_tx, skb); 776 ieee80211_stop_queues(mvm->hw); 777 778 /* trigger wakeup */ 779 iwl_mvm_ref(mvm, IWL_MVM_REF_TX); 780 iwl_mvm_unref(mvm, IWL_MVM_REF_TX); 781 782 defer = true; 783 out: 784 spin_unlock(&mvm->d0i3_tx_lock); 785 return defer; 786 } 787 788 static void iwl_mvm_mac_tx(struct ieee80211_hw *hw, 789 struct ieee80211_tx_control *control, 790 struct sk_buff *skb) 791 { 792 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 793 struct ieee80211_sta *sta = control->sta; 794 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 795 struct ieee80211_hdr *hdr = (void *)skb->data; 796 797 if (iwl_mvm_is_radio_killed(mvm)) { 798 IWL_DEBUG_DROP(mvm, "Dropping - RF/CT KILL\n"); 799 goto drop; 800 } 801 802 if (IEEE80211_SKB_CB(skb)->hw_queue == IWL_MVM_OFFCHANNEL_QUEUE && 803 !test_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status) && 804 !test_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status)) 805 goto drop; 806 807 /* treat non-bufferable MMPDUs as broadcast if sta is sleeping */ 808 if (unlikely(info->flags & IEEE80211_TX_CTL_NO_PS_BUFFER && 809 ieee80211_is_mgmt(hdr->frame_control) && 810 !ieee80211_is_deauth(hdr->frame_control) && 811 !ieee80211_is_disassoc(hdr->frame_control) && 812 !ieee80211_is_action(hdr->frame_control))) 813 sta = NULL; 814 815 if (sta) { 816 if (iwl_mvm_defer_tx(mvm, sta, skb)) 817 return; 818 if (iwl_mvm_tx_skb(mvm, skb, sta)) 819 goto drop; 820 return; 821 } 822 823 if (iwl_mvm_tx_skb_non_sta(mvm, skb)) 824 goto drop; 825 return; 826 drop: 827 ieee80211_free_txskb(hw, skb); 828 } 829 830 static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg) 831 { 832 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG) 833 return false; 834 return true; 835 } 836 837 static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg) 838 { 839 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG) 840 return false; 841 if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG) 842 return true; 843 844 /* enabled by default */ 845 return true; 846 } 847 848 #define CHECK_BA_TRIGGER(_mvm, _trig, _tid_bm, _tid, _fmt...) \ 849 do { \ 850 if (!(le16_to_cpu(_tid_bm) & BIT(_tid))) \ 851 break; \ 852 iwl_mvm_fw_dbg_collect_trig(_mvm, _trig, _fmt); \ 853 } while (0) 854 855 static void 856 iwl_mvm_ampdu_check_trigger(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 857 struct ieee80211_sta *sta, u16 tid, u16 rx_ba_ssn, 858 enum ieee80211_ampdu_mlme_action action) 859 { 860 struct iwl_fw_dbg_trigger_tlv *trig; 861 struct iwl_fw_dbg_trigger_ba *ba_trig; 862 863 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA)) 864 return; 865 866 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA); 867 ba_trig = (void *)trig->data; 868 869 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 870 return; 871 872 switch (action) { 873 case IEEE80211_AMPDU_TX_OPERATIONAL: { 874 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); 875 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid]; 876 877 CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_start, tid, 878 "TX AGG START: MAC %pM tid %d ssn %d\n", 879 sta->addr, tid, tid_data->ssn); 880 break; 881 } 882 case IEEE80211_AMPDU_TX_STOP_CONT: 883 CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_stop, tid, 884 "TX AGG STOP: MAC %pM tid %d\n", 885 sta->addr, tid); 886 break; 887 case IEEE80211_AMPDU_RX_START: 888 CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_start, tid, 889 "RX AGG START: MAC %pM tid %d ssn %d\n", 890 sta->addr, tid, rx_ba_ssn); 891 break; 892 case IEEE80211_AMPDU_RX_STOP: 893 CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_stop, tid, 894 "RX AGG STOP: MAC %pM tid %d\n", 895 sta->addr, tid); 896 break; 897 default: 898 break; 899 } 900 } 901 902 static int iwl_mvm_mac_ampdu_action(struct ieee80211_hw *hw, 903 struct ieee80211_vif *vif, 904 struct ieee80211_ampdu_params *params) 905 { 906 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 907 int ret; 908 bool tx_agg_ref = false; 909 struct ieee80211_sta *sta = params->sta; 910 enum ieee80211_ampdu_mlme_action action = params->action; 911 u16 tid = params->tid; 912 u16 *ssn = ¶ms->ssn; 913 u8 buf_size = params->buf_size; 914 bool amsdu = params->amsdu; 915 u16 timeout = params->timeout; 916 917 IWL_DEBUG_HT(mvm, "A-MPDU action on addr %pM tid %d: action %d\n", 918 sta->addr, tid, action); 919 920 if (!(mvm->nvm_data->sku_cap_11n_enable)) 921 return -EACCES; 922 923 /* return from D0i3 before starting a new Tx aggregation */ 924 switch (action) { 925 case IEEE80211_AMPDU_TX_START: 926 case IEEE80211_AMPDU_TX_STOP_CONT: 927 case IEEE80211_AMPDU_TX_STOP_FLUSH: 928 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT: 929 case IEEE80211_AMPDU_TX_OPERATIONAL: 930 /* 931 * for tx start, wait synchronously until D0i3 exit to 932 * get the correct sequence number for the tid. 933 * additionally, some other ampdu actions use direct 934 * target access, which is not handled automatically 935 * by the trans layer (unlike commands), so wait for 936 * d0i3 exit in these cases as well. 937 */ 938 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_TX_AGG); 939 if (ret) 940 return ret; 941 942 tx_agg_ref = true; 943 break; 944 default: 945 break; 946 } 947 948 mutex_lock(&mvm->mutex); 949 950 switch (action) { 951 case IEEE80211_AMPDU_RX_START: 952 if (!iwl_enable_rx_ampdu(mvm->cfg)) { 953 ret = -EINVAL; 954 break; 955 } 956 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, *ssn, true, buf_size, 957 timeout); 958 break; 959 case IEEE80211_AMPDU_RX_STOP: 960 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, 0, false, buf_size, 961 timeout); 962 break; 963 case IEEE80211_AMPDU_TX_START: 964 if (!iwl_enable_tx_ampdu(mvm->cfg)) { 965 ret = -EINVAL; 966 break; 967 } 968 ret = iwl_mvm_sta_tx_agg_start(mvm, vif, sta, tid, ssn); 969 break; 970 case IEEE80211_AMPDU_TX_STOP_CONT: 971 ret = iwl_mvm_sta_tx_agg_stop(mvm, vif, sta, tid); 972 break; 973 case IEEE80211_AMPDU_TX_STOP_FLUSH: 974 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT: 975 ret = iwl_mvm_sta_tx_agg_flush(mvm, vif, sta, tid); 976 break; 977 case IEEE80211_AMPDU_TX_OPERATIONAL: 978 ret = iwl_mvm_sta_tx_agg_oper(mvm, vif, sta, tid, 979 buf_size, amsdu); 980 break; 981 default: 982 WARN_ON_ONCE(1); 983 ret = -EINVAL; 984 break; 985 } 986 987 if (!ret) { 988 u16 rx_ba_ssn = 0; 989 990 if (action == IEEE80211_AMPDU_RX_START) 991 rx_ba_ssn = *ssn; 992 993 iwl_mvm_ampdu_check_trigger(mvm, vif, sta, tid, 994 rx_ba_ssn, action); 995 } 996 mutex_unlock(&mvm->mutex); 997 998 /* 999 * If the tid is marked as started, we won't use it for offloaded 1000 * traffic on the next D0i3 entry. It's safe to unref. 1001 */ 1002 if (tx_agg_ref) 1003 iwl_mvm_unref(mvm, IWL_MVM_REF_TX_AGG); 1004 1005 return ret; 1006 } 1007 1008 static void iwl_mvm_cleanup_iterator(void *data, u8 *mac, 1009 struct ieee80211_vif *vif) 1010 { 1011 struct iwl_mvm *mvm = data; 1012 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1013 1014 mvmvif->uploaded = false; 1015 mvmvif->ap_sta_id = IWL_MVM_INVALID_STA; 1016 1017 spin_lock_bh(&mvm->time_event_lock); 1018 iwl_mvm_te_clear_data(mvm, &mvmvif->time_event_data); 1019 spin_unlock_bh(&mvm->time_event_lock); 1020 1021 mvmvif->phy_ctxt = NULL; 1022 memset(&mvmvif->bf_data, 0, sizeof(mvmvif->bf_data)); 1023 } 1024 1025 static void iwl_mvm_restart_cleanup(struct iwl_mvm *mvm) 1026 { 1027 /* clear the D3 reconfig, we only need it to avoid dumping a 1028 * firmware coredump on reconfiguration, we shouldn't do that 1029 * on D3->D0 transition 1030 */ 1031 if (!test_and_clear_bit(IWL_MVM_STATUS_D3_RECONFIG, &mvm->status)) { 1032 mvm->fw_dump_desc = &iwl_mvm_dump_desc_assert; 1033 iwl_mvm_fw_error_dump(mvm); 1034 } 1035 1036 /* cleanup all stale references (scan, roc), but keep the 1037 * ucode_down ref until reconfig is complete 1038 */ 1039 iwl_mvm_unref_all_except(mvm, IWL_MVM_REF_UCODE_DOWN); 1040 1041 iwl_mvm_stop_device(mvm); 1042 1043 mvm->scan_status = 0; 1044 mvm->ps_disabled = false; 1045 mvm->calibrating = false; 1046 1047 /* just in case one was running */ 1048 iwl_mvm_cleanup_roc_te(mvm); 1049 ieee80211_remain_on_channel_expired(mvm->hw); 1050 1051 /* 1052 * cleanup all interfaces, even inactive ones, as some might have 1053 * gone down during the HW restart 1054 */ 1055 ieee80211_iterate_interfaces(mvm->hw, 0, iwl_mvm_cleanup_iterator, mvm); 1056 1057 mvm->p2p_device_vif = NULL; 1058 mvm->d0i3_ap_sta_id = IWL_MVM_INVALID_STA; 1059 1060 iwl_mvm_reset_phy_ctxts(mvm); 1061 memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table)); 1062 memset(mvm->sta_drained, 0, sizeof(mvm->sta_drained)); 1063 memset(mvm->sta_deferred_frames, 0, sizeof(mvm->sta_deferred_frames)); 1064 memset(mvm->tfd_drained, 0, sizeof(mvm->tfd_drained)); 1065 memset(&mvm->last_bt_notif, 0, sizeof(mvm->last_bt_notif)); 1066 memset(&mvm->last_bt_ci_cmd, 0, sizeof(mvm->last_bt_ci_cmd)); 1067 1068 ieee80211_wake_queues(mvm->hw); 1069 1070 /* clear any stale d0i3 state */ 1071 clear_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status); 1072 1073 mvm->vif_count = 0; 1074 mvm->rx_ba_sessions = 0; 1075 mvm->fw_dbg_conf = FW_DBG_INVALID; 1076 1077 /* keep statistics ticking */ 1078 iwl_mvm_accu_radio_stats(mvm); 1079 } 1080 1081 int __iwl_mvm_mac_start(struct iwl_mvm *mvm) 1082 { 1083 int ret; 1084 1085 lockdep_assert_held(&mvm->mutex); 1086 1087 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) { 1088 /* Clean up some internal and mac80211 state on restart */ 1089 iwl_mvm_restart_cleanup(mvm); 1090 } else { 1091 /* Hold the reference to prevent runtime suspend while 1092 * the start procedure runs. It's a bit confusing 1093 * that the UCODE_DOWN reference is taken, but it just 1094 * means "UCODE is not UP yet". ( TODO: rename this 1095 * reference). 1096 */ 1097 iwl_mvm_ref(mvm, IWL_MVM_REF_UCODE_DOWN); 1098 } 1099 ret = iwl_mvm_up(mvm); 1100 1101 if (ret && test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) { 1102 /* Something went wrong - we need to finish some cleanup 1103 * that normally iwl_mvm_mac_restart_complete() below 1104 * would do. 1105 */ 1106 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 1107 iwl_mvm_d0i3_enable_tx(mvm, NULL); 1108 } 1109 1110 return ret; 1111 } 1112 1113 static int iwl_mvm_mac_start(struct ieee80211_hw *hw) 1114 { 1115 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1116 int ret; 1117 1118 /* Some hw restart cleanups must not hold the mutex */ 1119 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) { 1120 /* 1121 * Make sure we are out of d0i3. This is needed 1122 * to make sure the reference accounting is correct 1123 * (and there is no stale d0i3_exit_work). 1124 */ 1125 wait_event_timeout(mvm->d0i3_exit_waitq, 1126 !test_bit(IWL_MVM_STATUS_IN_D0I3, 1127 &mvm->status), 1128 HZ); 1129 } 1130 1131 mutex_lock(&mvm->mutex); 1132 ret = __iwl_mvm_mac_start(mvm); 1133 mutex_unlock(&mvm->mutex); 1134 1135 return ret; 1136 } 1137 1138 static void iwl_mvm_restart_complete(struct iwl_mvm *mvm) 1139 { 1140 int ret; 1141 1142 mutex_lock(&mvm->mutex); 1143 1144 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 1145 iwl_mvm_d0i3_enable_tx(mvm, NULL); 1146 ret = iwl_mvm_update_quotas(mvm, true, NULL); 1147 if (ret) 1148 IWL_ERR(mvm, "Failed to update quotas after restart (%d)\n", 1149 ret); 1150 1151 /* allow transport/FW low power modes */ 1152 iwl_mvm_unref(mvm, IWL_MVM_REF_UCODE_DOWN); 1153 1154 /* 1155 * If we have TDLS peers, remove them. We don't know the last seqno/PN 1156 * of packets the FW sent out, so we must reconnect. 1157 */ 1158 iwl_mvm_teardown_tdls_peers(mvm); 1159 1160 mutex_unlock(&mvm->mutex); 1161 } 1162 1163 static void iwl_mvm_resume_complete(struct iwl_mvm *mvm) 1164 { 1165 if (iwl_mvm_is_d0i3_supported(mvm) && 1166 iwl_mvm_enter_d0i3_on_suspend(mvm)) 1167 WARN_ONCE(!wait_event_timeout(mvm->d0i3_exit_waitq, 1168 !test_bit(IWL_MVM_STATUS_IN_D0I3, 1169 &mvm->status), 1170 HZ), 1171 "D0i3 exit on resume timed out\n"); 1172 } 1173 1174 static void 1175 iwl_mvm_mac_reconfig_complete(struct ieee80211_hw *hw, 1176 enum ieee80211_reconfig_type reconfig_type) 1177 { 1178 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1179 1180 switch (reconfig_type) { 1181 case IEEE80211_RECONFIG_TYPE_RESTART: 1182 iwl_mvm_restart_complete(mvm); 1183 break; 1184 case IEEE80211_RECONFIG_TYPE_SUSPEND: 1185 iwl_mvm_resume_complete(mvm); 1186 break; 1187 } 1188 } 1189 1190 void __iwl_mvm_mac_stop(struct iwl_mvm *mvm) 1191 { 1192 lockdep_assert_held(&mvm->mutex); 1193 1194 /* firmware counters are obviously reset now, but we shouldn't 1195 * partially track so also clear the fw_reset_accu counters. 1196 */ 1197 memset(&mvm->accu_radio_stats, 0, sizeof(mvm->accu_radio_stats)); 1198 1199 /* async_handlers_wk is now blocked */ 1200 1201 /* 1202 * The work item could be running or queued if the 1203 * ROC time event stops just as we get here. 1204 */ 1205 flush_work(&mvm->roc_done_wk); 1206 1207 iwl_mvm_stop_device(mvm); 1208 1209 iwl_mvm_async_handlers_purge(mvm); 1210 /* async_handlers_list is empty and will stay empty: HW is stopped */ 1211 1212 /* the fw is stopped, the aux sta is dead: clean up driver state */ 1213 iwl_mvm_del_aux_sta(mvm); 1214 1215 /* 1216 * Clear IN_HW_RESTART flag when stopping the hw (as restart_complete() 1217 * won't be called in this case). 1218 * But make sure to cleanup interfaces that have gone down before/during 1219 * HW restart was requested. 1220 */ 1221 if (test_and_clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) 1222 ieee80211_iterate_interfaces(mvm->hw, 0, 1223 iwl_mvm_cleanup_iterator, mvm); 1224 1225 /* We shouldn't have any UIDs still set. Loop over all the UIDs to 1226 * make sure there's nothing left there and warn if any is found. 1227 */ 1228 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) { 1229 int i; 1230 1231 for (i = 0; i < mvm->max_scans; i++) { 1232 if (WARN_ONCE(mvm->scan_uid_status[i], 1233 "UMAC scan UID %d status was not cleaned\n", 1234 i)) 1235 mvm->scan_uid_status[i] = 0; 1236 } 1237 } 1238 } 1239 1240 static void iwl_mvm_mac_stop(struct ieee80211_hw *hw) 1241 { 1242 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1243 1244 flush_work(&mvm->d0i3_exit_work); 1245 flush_work(&mvm->async_handlers_wk); 1246 flush_work(&mvm->add_stream_wk); 1247 1248 /* 1249 * Lock and clear the firmware running bit here already, so that 1250 * new commands coming in elsewhere, e.g. from debugfs, will not 1251 * be able to proceed. This is important here because one of those 1252 * debugfs files causes the fw_dump_wk to be triggered, and if we 1253 * don't stop debugfs accesses before canceling that it could be 1254 * retriggered after we flush it but before we've cleared the bit. 1255 */ 1256 clear_bit(IWL_MVM_STATUS_FIRMWARE_RUNNING, &mvm->status); 1257 1258 cancel_delayed_work_sync(&mvm->fw_dump_wk); 1259 cancel_delayed_work_sync(&mvm->cs_tx_unblock_dwork); 1260 cancel_delayed_work_sync(&mvm->scan_timeout_dwork); 1261 iwl_mvm_free_fw_dump_desc(mvm); 1262 1263 mutex_lock(&mvm->mutex); 1264 __iwl_mvm_mac_stop(mvm); 1265 mutex_unlock(&mvm->mutex); 1266 1267 /* 1268 * The worker might have been waiting for the mutex, let it run and 1269 * discover that its list is now empty. 1270 */ 1271 cancel_work_sync(&mvm->async_handlers_wk); 1272 } 1273 1274 static struct iwl_mvm_phy_ctxt *iwl_mvm_get_free_phy_ctxt(struct iwl_mvm *mvm) 1275 { 1276 u16 i; 1277 1278 lockdep_assert_held(&mvm->mutex); 1279 1280 for (i = 0; i < NUM_PHY_CTX; i++) 1281 if (!mvm->phy_ctxts[i].ref) 1282 return &mvm->phy_ctxts[i]; 1283 1284 IWL_ERR(mvm, "No available PHY context\n"); 1285 return NULL; 1286 } 1287 1288 static int iwl_mvm_set_tx_power(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 1289 s16 tx_power) 1290 { 1291 struct iwl_dev_tx_power_cmd cmd = { 1292 .v3.set_mode = cpu_to_le32(IWL_TX_POWER_MODE_SET_MAC), 1293 .v3.mac_context_id = 1294 cpu_to_le32(iwl_mvm_vif_from_mac80211(vif)->id), 1295 .v3.pwr_restriction = cpu_to_le16(8 * tx_power), 1296 }; 1297 int len = sizeof(cmd); 1298 1299 if (tx_power == IWL_DEFAULT_MAX_TX_POWER) 1300 cmd.v3.pwr_restriction = cpu_to_le16(IWL_DEV_MAX_TX_POWER); 1301 1302 if (!fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_TX_POWER_ACK)) 1303 len = sizeof(cmd.v3); 1304 1305 return iwl_mvm_send_cmd_pdu(mvm, REDUCE_TX_POWER_CMD, 0, len, &cmd); 1306 } 1307 1308 static int iwl_mvm_mac_add_interface(struct ieee80211_hw *hw, 1309 struct ieee80211_vif *vif) 1310 { 1311 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1312 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1313 int ret; 1314 1315 mvmvif->mvm = mvm; 1316 1317 /* 1318 * make sure D0i3 exit is completed, otherwise a target access 1319 * during tx queue configuration could be done when still in 1320 * D0i3 state. 1321 */ 1322 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_ADD_IF); 1323 if (ret) 1324 return ret; 1325 1326 /* 1327 * Not much to do here. The stack will not allow interface 1328 * types or combinations that we didn't advertise, so we 1329 * don't really have to check the types. 1330 */ 1331 1332 mutex_lock(&mvm->mutex); 1333 1334 /* make sure that beacon statistics don't go backwards with FW reset */ 1335 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) 1336 mvmvif->beacon_stats.accu_num_beacons += 1337 mvmvif->beacon_stats.num_beacons; 1338 1339 /* Allocate resources for the MAC context, and add it to the fw */ 1340 ret = iwl_mvm_mac_ctxt_init(mvm, vif); 1341 if (ret) 1342 goto out_unlock; 1343 1344 /* Counting number of interfaces is needed for legacy PM */ 1345 if (vif->type != NL80211_IFTYPE_P2P_DEVICE) 1346 mvm->vif_count++; 1347 1348 /* 1349 * The AP binding flow can be done only after the beacon 1350 * template is configured (which happens only in the mac80211 1351 * start_ap() flow), and adding the broadcast station can happen 1352 * only after the binding. 1353 * In addition, since modifying the MAC before adding a bcast 1354 * station is not allowed by the FW, delay the adding of MAC context to 1355 * the point where we can also add the bcast station. 1356 * In short: there's not much we can do at this point, other than 1357 * allocating resources :) 1358 */ 1359 if (vif->type == NL80211_IFTYPE_AP || 1360 vif->type == NL80211_IFTYPE_ADHOC) { 1361 ret = iwl_mvm_alloc_bcast_sta(mvm, vif); 1362 if (ret) { 1363 IWL_ERR(mvm, "Failed to allocate bcast sta\n"); 1364 goto out_release; 1365 } 1366 1367 if (iwl_mvm_is_dqa_supported(mvm)) { 1368 /* 1369 * Only queue for this station is the mcast queue, 1370 * which shouldn't be in TFD mask anyway 1371 */ 1372 ret = iwl_mvm_allocate_int_sta(mvm, &mvmvif->mcast_sta, 1373 0, vif->type, 1374 IWL_STA_MULTICAST); 1375 if (ret) 1376 goto out_release; 1377 } 1378 1379 iwl_mvm_vif_dbgfs_register(mvm, vif); 1380 goto out_unlock; 1381 } 1382 1383 mvmvif->features |= hw->netdev_features; 1384 1385 ret = iwl_mvm_mac_ctxt_add(mvm, vif); 1386 if (ret) 1387 goto out_release; 1388 1389 ret = iwl_mvm_power_update_mac(mvm); 1390 if (ret) 1391 goto out_remove_mac; 1392 1393 /* beacon filtering */ 1394 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0); 1395 if (ret) 1396 goto out_remove_mac; 1397 1398 if (!mvm->bf_allowed_vif && 1399 vif->type == NL80211_IFTYPE_STATION && !vif->p2p) { 1400 mvm->bf_allowed_vif = mvmvif; 1401 vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER | 1402 IEEE80211_VIF_SUPPORTS_CQM_RSSI; 1403 } 1404 1405 /* 1406 * P2P_DEVICE interface does not have a channel context assigned to it, 1407 * so a dedicated PHY context is allocated to it and the corresponding 1408 * MAC context is bound to it at this stage. 1409 */ 1410 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) { 1411 1412 mvmvif->phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm); 1413 if (!mvmvif->phy_ctxt) { 1414 ret = -ENOSPC; 1415 goto out_free_bf; 1416 } 1417 1418 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt); 1419 ret = iwl_mvm_binding_add_vif(mvm, vif); 1420 if (ret) 1421 goto out_unref_phy; 1422 1423 ret = iwl_mvm_add_bcast_sta(mvm, vif); 1424 if (ret) 1425 goto out_unbind; 1426 1427 /* Save a pointer to p2p device vif, so it can later be used to 1428 * update the p2p device MAC when a GO is started/stopped */ 1429 mvm->p2p_device_vif = vif; 1430 } 1431 1432 iwl_mvm_vif_dbgfs_register(mvm, vif); 1433 goto out_unlock; 1434 1435 out_unbind: 1436 iwl_mvm_binding_remove_vif(mvm, vif); 1437 out_unref_phy: 1438 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt); 1439 out_free_bf: 1440 if (mvm->bf_allowed_vif == mvmvif) { 1441 mvm->bf_allowed_vif = NULL; 1442 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER | 1443 IEEE80211_VIF_SUPPORTS_CQM_RSSI); 1444 } 1445 out_remove_mac: 1446 mvmvif->phy_ctxt = NULL; 1447 iwl_mvm_mac_ctxt_remove(mvm, vif); 1448 out_release: 1449 if (vif->type != NL80211_IFTYPE_P2P_DEVICE) 1450 mvm->vif_count--; 1451 1452 iwl_mvm_mac_ctxt_release(mvm, vif); 1453 out_unlock: 1454 mutex_unlock(&mvm->mutex); 1455 1456 iwl_mvm_unref(mvm, IWL_MVM_REF_ADD_IF); 1457 1458 return ret; 1459 } 1460 1461 static void iwl_mvm_prepare_mac_removal(struct iwl_mvm *mvm, 1462 struct ieee80211_vif *vif) 1463 { 1464 u32 tfd_msk = iwl_mvm_mac_get_queues_mask(vif); 1465 1466 if (tfd_msk && !iwl_mvm_is_dqa_supported(mvm)) { 1467 /* 1468 * mac80211 first removes all the stations of the vif and 1469 * then removes the vif. When it removes a station it also 1470 * flushes the AMPDU session. So by now, all the AMPDU sessions 1471 * of all the stations of this vif are closed, and the queues 1472 * of these AMPDU sessions are properly closed. 1473 * We still need to take care of the shared queues of the vif. 1474 * Flush them here. 1475 * For DQA mode there is no need - broacast and multicast queue 1476 * are flushed separately. 1477 */ 1478 mutex_lock(&mvm->mutex); 1479 iwl_mvm_flush_tx_path(mvm, tfd_msk, 0); 1480 mutex_unlock(&mvm->mutex); 1481 1482 /* 1483 * There are transports that buffer a few frames in the host. 1484 * For these, the flush above isn't enough since while we were 1485 * flushing, the transport might have sent more frames to the 1486 * device. To solve this, wait here until the transport is 1487 * empty. Technically, this could have replaced the flush 1488 * above, but flush is much faster than draining. So flush 1489 * first, and drain to make sure we have no frames in the 1490 * transport anymore. 1491 * If a station still had frames on the shared queues, it is 1492 * already marked as draining, so to complete the draining, we 1493 * just need to wait until the transport is empty. 1494 */ 1495 iwl_trans_wait_tx_queues_empty(mvm->trans, tfd_msk); 1496 } 1497 1498 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) { 1499 /* 1500 * Flush the ROC worker which will flush the OFFCHANNEL queue. 1501 * We assume here that all the packets sent to the OFFCHANNEL 1502 * queue are sent in ROC session. 1503 */ 1504 flush_work(&mvm->roc_done_wk); 1505 } else { 1506 /* 1507 * By now, all the AC queues are empty. The AGG queues are 1508 * empty too. We already got all the Tx responses for all the 1509 * packets in the queues. The drain work can have been 1510 * triggered. Flush it. 1511 */ 1512 flush_work(&mvm->sta_drained_wk); 1513 } 1514 } 1515 1516 static void iwl_mvm_mac_remove_interface(struct ieee80211_hw *hw, 1517 struct ieee80211_vif *vif) 1518 { 1519 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1520 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1521 1522 iwl_mvm_prepare_mac_removal(mvm, vif); 1523 1524 mutex_lock(&mvm->mutex); 1525 1526 if (mvm->bf_allowed_vif == mvmvif) { 1527 mvm->bf_allowed_vif = NULL; 1528 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER | 1529 IEEE80211_VIF_SUPPORTS_CQM_RSSI); 1530 } 1531 1532 iwl_mvm_vif_dbgfs_clean(mvm, vif); 1533 1534 /* 1535 * For AP/GO interface, the tear down of the resources allocated to the 1536 * interface is be handled as part of the stop_ap flow. 1537 */ 1538 if (vif->type == NL80211_IFTYPE_AP || 1539 vif->type == NL80211_IFTYPE_ADHOC) { 1540 #ifdef CONFIG_NL80211_TESTMODE 1541 if (vif == mvm->noa_vif) { 1542 mvm->noa_vif = NULL; 1543 mvm->noa_duration = 0; 1544 } 1545 #endif 1546 iwl_mvm_dealloc_int_sta(mvm, &mvmvif->mcast_sta); 1547 iwl_mvm_dealloc_bcast_sta(mvm, vif); 1548 goto out_release; 1549 } 1550 1551 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) { 1552 mvm->p2p_device_vif = NULL; 1553 iwl_mvm_rm_bcast_sta(mvm, vif); 1554 iwl_mvm_binding_remove_vif(mvm, vif); 1555 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt); 1556 mvmvif->phy_ctxt = NULL; 1557 } 1558 1559 if (mvm->vif_count && vif->type != NL80211_IFTYPE_P2P_DEVICE) 1560 mvm->vif_count--; 1561 1562 iwl_mvm_power_update_mac(mvm); 1563 iwl_mvm_mac_ctxt_remove(mvm, vif); 1564 1565 out_release: 1566 iwl_mvm_mac_ctxt_release(mvm, vif); 1567 mutex_unlock(&mvm->mutex); 1568 } 1569 1570 static int iwl_mvm_mac_config(struct ieee80211_hw *hw, u32 changed) 1571 { 1572 return 0; 1573 } 1574 1575 struct iwl_mvm_mc_iter_data { 1576 struct iwl_mvm *mvm; 1577 int port_id; 1578 }; 1579 1580 static void iwl_mvm_mc_iface_iterator(void *_data, u8 *mac, 1581 struct ieee80211_vif *vif) 1582 { 1583 struct iwl_mvm_mc_iter_data *data = _data; 1584 struct iwl_mvm *mvm = data->mvm; 1585 struct iwl_mcast_filter_cmd *cmd = mvm->mcast_filter_cmd; 1586 int ret, len; 1587 1588 /* if we don't have free ports, mcast frames will be dropped */ 1589 if (WARN_ON_ONCE(data->port_id >= MAX_PORT_ID_NUM)) 1590 return; 1591 1592 if (vif->type != NL80211_IFTYPE_STATION || 1593 !vif->bss_conf.assoc) 1594 return; 1595 1596 cmd->port_id = data->port_id++; 1597 memcpy(cmd->bssid, vif->bss_conf.bssid, ETH_ALEN); 1598 len = roundup(sizeof(*cmd) + cmd->count * ETH_ALEN, 4); 1599 1600 ret = iwl_mvm_send_cmd_pdu(mvm, MCAST_FILTER_CMD, CMD_ASYNC, len, cmd); 1601 if (ret) 1602 IWL_ERR(mvm, "mcast filter cmd error. ret=%d\n", ret); 1603 } 1604 1605 static void iwl_mvm_recalc_multicast(struct iwl_mvm *mvm) 1606 { 1607 struct iwl_mvm_mc_iter_data iter_data = { 1608 .mvm = mvm, 1609 }; 1610 1611 lockdep_assert_held(&mvm->mutex); 1612 1613 if (WARN_ON_ONCE(!mvm->mcast_filter_cmd)) 1614 return; 1615 1616 ieee80211_iterate_active_interfaces_atomic( 1617 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 1618 iwl_mvm_mc_iface_iterator, &iter_data); 1619 } 1620 1621 static u64 iwl_mvm_prepare_multicast(struct ieee80211_hw *hw, 1622 struct netdev_hw_addr_list *mc_list) 1623 { 1624 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1625 struct iwl_mcast_filter_cmd *cmd; 1626 struct netdev_hw_addr *addr; 1627 int addr_count; 1628 bool pass_all; 1629 int len; 1630 1631 addr_count = netdev_hw_addr_list_count(mc_list); 1632 pass_all = addr_count > MAX_MCAST_FILTERING_ADDRESSES || 1633 IWL_MVM_FW_MCAST_FILTER_PASS_ALL; 1634 if (pass_all) 1635 addr_count = 0; 1636 1637 len = roundup(sizeof(*cmd) + addr_count * ETH_ALEN, 4); 1638 cmd = kzalloc(len, GFP_ATOMIC); 1639 if (!cmd) 1640 return 0; 1641 1642 if (pass_all) { 1643 cmd->pass_all = 1; 1644 return (u64)(unsigned long)cmd; 1645 } 1646 1647 netdev_hw_addr_list_for_each(addr, mc_list) { 1648 IWL_DEBUG_MAC80211(mvm, "mcast addr (%d): %pM\n", 1649 cmd->count, addr->addr); 1650 memcpy(&cmd->addr_list[cmd->count * ETH_ALEN], 1651 addr->addr, ETH_ALEN); 1652 cmd->count++; 1653 } 1654 1655 return (u64)(unsigned long)cmd; 1656 } 1657 1658 static void iwl_mvm_configure_filter(struct ieee80211_hw *hw, 1659 unsigned int changed_flags, 1660 unsigned int *total_flags, 1661 u64 multicast) 1662 { 1663 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1664 struct iwl_mcast_filter_cmd *cmd = (void *)(unsigned long)multicast; 1665 1666 mutex_lock(&mvm->mutex); 1667 1668 /* replace previous configuration */ 1669 kfree(mvm->mcast_filter_cmd); 1670 mvm->mcast_filter_cmd = cmd; 1671 1672 if (!cmd) 1673 goto out; 1674 1675 iwl_mvm_recalc_multicast(mvm); 1676 out: 1677 mutex_unlock(&mvm->mutex); 1678 *total_flags = 0; 1679 } 1680 1681 static void iwl_mvm_config_iface_filter(struct ieee80211_hw *hw, 1682 struct ieee80211_vif *vif, 1683 unsigned int filter_flags, 1684 unsigned int changed_flags) 1685 { 1686 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1687 1688 /* We support only filter for probe requests */ 1689 if (!(changed_flags & FIF_PROBE_REQ)) 1690 return; 1691 1692 /* Supported only for p2p client interfaces */ 1693 if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc || 1694 !vif->p2p) 1695 return; 1696 1697 mutex_lock(&mvm->mutex); 1698 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 1699 mutex_unlock(&mvm->mutex); 1700 } 1701 1702 #ifdef CONFIG_IWLWIFI_BCAST_FILTERING 1703 struct iwl_bcast_iter_data { 1704 struct iwl_mvm *mvm; 1705 struct iwl_bcast_filter_cmd *cmd; 1706 u8 current_filter; 1707 }; 1708 1709 static void 1710 iwl_mvm_set_bcast_filter(struct ieee80211_vif *vif, 1711 const struct iwl_fw_bcast_filter *in_filter, 1712 struct iwl_fw_bcast_filter *out_filter) 1713 { 1714 struct iwl_fw_bcast_filter_attr *attr; 1715 int i; 1716 1717 memcpy(out_filter, in_filter, sizeof(*out_filter)); 1718 1719 for (i = 0; i < ARRAY_SIZE(out_filter->attrs); i++) { 1720 attr = &out_filter->attrs[i]; 1721 1722 if (!attr->mask) 1723 break; 1724 1725 switch (attr->reserved1) { 1726 case cpu_to_le16(BC_FILTER_MAGIC_IP): 1727 if (vif->bss_conf.arp_addr_cnt != 1) { 1728 attr->mask = 0; 1729 continue; 1730 } 1731 1732 attr->val = vif->bss_conf.arp_addr_list[0]; 1733 break; 1734 case cpu_to_le16(BC_FILTER_MAGIC_MAC): 1735 attr->val = *(__be32 *)&vif->addr[2]; 1736 break; 1737 default: 1738 break; 1739 } 1740 attr->reserved1 = 0; 1741 out_filter->num_attrs++; 1742 } 1743 } 1744 1745 static void iwl_mvm_bcast_filter_iterator(void *_data, u8 *mac, 1746 struct ieee80211_vif *vif) 1747 { 1748 struct iwl_bcast_iter_data *data = _data; 1749 struct iwl_mvm *mvm = data->mvm; 1750 struct iwl_bcast_filter_cmd *cmd = data->cmd; 1751 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1752 struct iwl_fw_bcast_mac *bcast_mac; 1753 int i; 1754 1755 if (WARN_ON(mvmvif->id >= ARRAY_SIZE(cmd->macs))) 1756 return; 1757 1758 bcast_mac = &cmd->macs[mvmvif->id]; 1759 1760 /* 1761 * enable filtering only for associated stations, but not for P2P 1762 * Clients 1763 */ 1764 if (vif->type != NL80211_IFTYPE_STATION || vif->p2p || 1765 !vif->bss_conf.assoc) 1766 return; 1767 1768 bcast_mac->default_discard = 1; 1769 1770 /* copy all configured filters */ 1771 for (i = 0; mvm->bcast_filters[i].attrs[0].mask; i++) { 1772 /* 1773 * Make sure we don't exceed our filters limit. 1774 * if there is still a valid filter to be configured, 1775 * be on the safe side and just allow bcast for this mac. 1776 */ 1777 if (WARN_ON_ONCE(data->current_filter >= 1778 ARRAY_SIZE(cmd->filters))) { 1779 bcast_mac->default_discard = 0; 1780 bcast_mac->attached_filters = 0; 1781 break; 1782 } 1783 1784 iwl_mvm_set_bcast_filter(vif, 1785 &mvm->bcast_filters[i], 1786 &cmd->filters[data->current_filter]); 1787 1788 /* skip current filter if it contains no attributes */ 1789 if (!cmd->filters[data->current_filter].num_attrs) 1790 continue; 1791 1792 /* attach the filter to current mac */ 1793 bcast_mac->attached_filters |= 1794 cpu_to_le16(BIT(data->current_filter)); 1795 1796 data->current_filter++; 1797 } 1798 } 1799 1800 bool iwl_mvm_bcast_filter_build_cmd(struct iwl_mvm *mvm, 1801 struct iwl_bcast_filter_cmd *cmd) 1802 { 1803 struct iwl_bcast_iter_data iter_data = { 1804 .mvm = mvm, 1805 .cmd = cmd, 1806 }; 1807 1808 if (IWL_MVM_FW_BCAST_FILTER_PASS_ALL) 1809 return false; 1810 1811 memset(cmd, 0, sizeof(*cmd)); 1812 cmd->max_bcast_filters = ARRAY_SIZE(cmd->filters); 1813 cmd->max_macs = ARRAY_SIZE(cmd->macs); 1814 1815 #ifdef CONFIG_IWLWIFI_DEBUGFS 1816 /* use debugfs filters/macs if override is configured */ 1817 if (mvm->dbgfs_bcast_filtering.override) { 1818 memcpy(cmd->filters, &mvm->dbgfs_bcast_filtering.cmd.filters, 1819 sizeof(cmd->filters)); 1820 memcpy(cmd->macs, &mvm->dbgfs_bcast_filtering.cmd.macs, 1821 sizeof(cmd->macs)); 1822 return true; 1823 } 1824 #endif 1825 1826 /* if no filters are configured, do nothing */ 1827 if (!mvm->bcast_filters) 1828 return false; 1829 1830 /* configure and attach these filters for each associated sta vif */ 1831 ieee80211_iterate_active_interfaces( 1832 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 1833 iwl_mvm_bcast_filter_iterator, &iter_data); 1834 1835 return true; 1836 } 1837 1838 static int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm) 1839 { 1840 struct iwl_bcast_filter_cmd cmd; 1841 1842 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_BCAST_FILTERING)) 1843 return 0; 1844 1845 if (!iwl_mvm_bcast_filter_build_cmd(mvm, &cmd)) 1846 return 0; 1847 1848 return iwl_mvm_send_cmd_pdu(mvm, BCAST_FILTER_CMD, 0, 1849 sizeof(cmd), &cmd); 1850 } 1851 #else 1852 static inline int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm) 1853 { 1854 return 0; 1855 } 1856 #endif 1857 1858 static int iwl_mvm_update_mu_groups(struct iwl_mvm *mvm, 1859 struct ieee80211_vif *vif) 1860 { 1861 struct iwl_mu_group_mgmt_cmd cmd = {}; 1862 1863 memcpy(cmd.membership_status, vif->bss_conf.mu_group.membership, 1864 WLAN_MEMBERSHIP_LEN); 1865 memcpy(cmd.user_position, vif->bss_conf.mu_group.position, 1866 WLAN_USER_POSITION_LEN); 1867 1868 return iwl_mvm_send_cmd_pdu(mvm, 1869 WIDE_ID(DATA_PATH_GROUP, 1870 UPDATE_MU_GROUPS_CMD), 1871 0, sizeof(cmd), &cmd); 1872 } 1873 1874 static void iwl_mvm_mu_mimo_iface_iterator(void *_data, u8 *mac, 1875 struct ieee80211_vif *vif) 1876 { 1877 if (vif->mu_mimo_owner) { 1878 struct iwl_mu_group_mgmt_notif *notif = _data; 1879 1880 /* 1881 * MU-MIMO Group Id action frame is little endian. We treat 1882 * the data received from firmware as if it came from the 1883 * action frame, so no conversion is needed. 1884 */ 1885 ieee80211_update_mu_groups(vif, 1886 (u8 *)¬if->membership_status, 1887 (u8 *)¬if->user_position); 1888 } 1889 } 1890 1891 void iwl_mvm_mu_mimo_grp_notif(struct iwl_mvm *mvm, 1892 struct iwl_rx_cmd_buffer *rxb) 1893 { 1894 struct iwl_rx_packet *pkt = rxb_addr(rxb); 1895 struct iwl_mu_group_mgmt_notif *notif = (void *)pkt->data; 1896 1897 ieee80211_iterate_active_interfaces_atomic( 1898 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 1899 iwl_mvm_mu_mimo_iface_iterator, notif); 1900 } 1901 1902 static void iwl_mvm_bss_info_changed_station(struct iwl_mvm *mvm, 1903 struct ieee80211_vif *vif, 1904 struct ieee80211_bss_conf *bss_conf, 1905 u32 changes) 1906 { 1907 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1908 int ret; 1909 1910 /* 1911 * Re-calculate the tsf id, as the master-slave relations depend on the 1912 * beacon interval, which was not known when the station interface was 1913 * added. 1914 */ 1915 if (changes & BSS_CHANGED_ASSOC && bss_conf->assoc) 1916 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif); 1917 1918 if (changes & BSS_CHANGED_ASSOC && !bss_conf->assoc && 1919 mvmvif->lqm_active) 1920 iwl_mvm_send_lqm_cmd(vif, LQM_CMD_OPERATION_STOP_MEASUREMENT, 1921 0, 0); 1922 1923 /* 1924 * If we're not associated yet, take the (new) BSSID before associating 1925 * so the firmware knows. If we're already associated, then use the old 1926 * BSSID here, and we'll send a cleared one later in the CHANGED_ASSOC 1927 * branch for disassociation below. 1928 */ 1929 if (changes & BSS_CHANGED_BSSID && !mvmvif->associated) 1930 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN); 1931 1932 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, mvmvif->bssid); 1933 if (ret) 1934 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr); 1935 1936 /* after sending it once, adopt mac80211 data */ 1937 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN); 1938 mvmvif->associated = bss_conf->assoc; 1939 1940 if (changes & BSS_CHANGED_ASSOC) { 1941 if (bss_conf->assoc) { 1942 /* clear statistics to get clean beacon counter */ 1943 iwl_mvm_request_statistics(mvm, true); 1944 memset(&mvmvif->beacon_stats, 0, 1945 sizeof(mvmvif->beacon_stats)); 1946 1947 /* add quota for this interface */ 1948 ret = iwl_mvm_update_quotas(mvm, true, NULL); 1949 if (ret) { 1950 IWL_ERR(mvm, "failed to update quotas\n"); 1951 return; 1952 } 1953 1954 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, 1955 &mvm->status)) { 1956 /* 1957 * If we're restarting then the firmware will 1958 * obviously have lost synchronisation with 1959 * the AP. It will attempt to synchronise by 1960 * itself, but we can make it more reliable by 1961 * scheduling a session protection time event. 1962 * 1963 * The firmware needs to receive a beacon to 1964 * catch up with synchronisation, use 110% of 1965 * the beacon interval. 1966 * 1967 * Set a large maximum delay to allow for more 1968 * than a single interface. 1969 */ 1970 u32 dur = (11 * vif->bss_conf.beacon_int) / 10; 1971 iwl_mvm_protect_session(mvm, vif, dur, dur, 1972 5 * dur, false); 1973 } 1974 1975 iwl_mvm_sf_update(mvm, vif, false); 1976 iwl_mvm_power_vif_assoc(mvm, vif); 1977 if (vif->p2p) { 1978 iwl_mvm_ref(mvm, IWL_MVM_REF_P2P_CLIENT); 1979 iwl_mvm_update_smps(mvm, vif, 1980 IWL_MVM_SMPS_REQ_PROT, 1981 IEEE80211_SMPS_DYNAMIC); 1982 } 1983 } else if (mvmvif->ap_sta_id != IWL_MVM_INVALID_STA) { 1984 /* 1985 * If update fails - SF might be running in associated 1986 * mode while disassociated - which is forbidden. 1987 */ 1988 WARN_ONCE(iwl_mvm_sf_update(mvm, vif, false), 1989 "Failed to update SF upon disassociation\n"); 1990 1991 /* 1992 * If we get an assert during the connection (after the 1993 * station has been added, but before the vif is set 1994 * to associated), mac80211 will re-add the station and 1995 * then configure the vif. Since the vif is not 1996 * associated, we would remove the station here and 1997 * this would fail the recovery. 1998 */ 1999 if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, 2000 &mvm->status)) { 2001 /* 2002 * Remove AP station now that 2003 * the MAC is unassoc 2004 */ 2005 ret = iwl_mvm_rm_sta_id(mvm, vif, 2006 mvmvif->ap_sta_id); 2007 if (ret) 2008 IWL_ERR(mvm, 2009 "failed to remove AP station\n"); 2010 2011 if (mvm->d0i3_ap_sta_id == mvmvif->ap_sta_id) 2012 mvm->d0i3_ap_sta_id = 2013 IWL_MVM_INVALID_STA; 2014 mvmvif->ap_sta_id = IWL_MVM_INVALID_STA; 2015 } 2016 2017 /* remove quota for this interface */ 2018 ret = iwl_mvm_update_quotas(mvm, false, NULL); 2019 if (ret) 2020 IWL_ERR(mvm, "failed to update quotas\n"); 2021 2022 if (vif->p2p) 2023 iwl_mvm_unref(mvm, IWL_MVM_REF_P2P_CLIENT); 2024 2025 /* this will take the cleared BSSID from bss_conf */ 2026 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 2027 if (ret) 2028 IWL_ERR(mvm, 2029 "failed to update MAC %pM (clear after unassoc)\n", 2030 vif->addr); 2031 } 2032 2033 /* 2034 * The firmware tracks the MU-MIMO group on its own. 2035 * However, on HW restart we should restore this data. 2036 */ 2037 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 2038 (changes & BSS_CHANGED_MU_GROUPS) && vif->mu_mimo_owner) { 2039 ret = iwl_mvm_update_mu_groups(mvm, vif); 2040 if (ret) 2041 IWL_ERR(mvm, 2042 "failed to update VHT MU_MIMO groups\n"); 2043 } 2044 2045 iwl_mvm_recalc_multicast(mvm); 2046 iwl_mvm_configure_bcast_filter(mvm); 2047 2048 /* reset rssi values */ 2049 mvmvif->bf_data.ave_beacon_signal = 0; 2050 2051 iwl_mvm_bt_coex_vif_change(mvm); 2052 iwl_mvm_update_smps(mvm, vif, IWL_MVM_SMPS_REQ_TT, 2053 IEEE80211_SMPS_AUTOMATIC); 2054 if (fw_has_capa(&mvm->fw->ucode_capa, 2055 IWL_UCODE_TLV_CAPA_UMAC_SCAN)) 2056 iwl_mvm_config_scan(mvm); 2057 } 2058 2059 if (changes & BSS_CHANGED_BEACON_INFO) { 2060 /* 2061 * We received a beacon from the associated AP so 2062 * remove the session protection. 2063 */ 2064 iwl_mvm_remove_time_event(mvm, mvmvif, 2065 &mvmvif->time_event_data); 2066 2067 iwl_mvm_sf_update(mvm, vif, false); 2068 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0)); 2069 } 2070 2071 if (changes & (BSS_CHANGED_PS | BSS_CHANGED_P2P_PS | BSS_CHANGED_QOS | 2072 /* 2073 * Send power command on every beacon change, 2074 * because we may have not enabled beacon abort yet. 2075 */ 2076 BSS_CHANGED_BEACON_INFO)) { 2077 ret = iwl_mvm_power_update_mac(mvm); 2078 if (ret) 2079 IWL_ERR(mvm, "failed to update power mode\n"); 2080 } 2081 2082 if (changes & BSS_CHANGED_TXPOWER) { 2083 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n", 2084 bss_conf->txpower); 2085 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower); 2086 } 2087 2088 if (changes & BSS_CHANGED_CQM) { 2089 IWL_DEBUG_MAC80211(mvm, "cqm info_changed\n"); 2090 /* reset cqm events tracking */ 2091 mvmvif->bf_data.last_cqm_event = 0; 2092 if (mvmvif->bf_data.bf_enabled) { 2093 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0); 2094 if (ret) 2095 IWL_ERR(mvm, 2096 "failed to update CQM thresholds\n"); 2097 } 2098 } 2099 2100 if (changes & BSS_CHANGED_ARP_FILTER) { 2101 IWL_DEBUG_MAC80211(mvm, "arp filter changed\n"); 2102 iwl_mvm_configure_bcast_filter(mvm); 2103 } 2104 } 2105 2106 static int iwl_mvm_start_ap_ibss(struct ieee80211_hw *hw, 2107 struct ieee80211_vif *vif) 2108 { 2109 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2110 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2111 int ret; 2112 2113 /* 2114 * iwl_mvm_mac_ctxt_add() might read directly from the device 2115 * (the system time), so make sure it is available. 2116 */ 2117 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_START_AP); 2118 if (ret) 2119 return ret; 2120 2121 mutex_lock(&mvm->mutex); 2122 2123 /* Send the beacon template */ 2124 ret = iwl_mvm_mac_ctxt_beacon_changed(mvm, vif); 2125 if (ret) 2126 goto out_unlock; 2127 2128 /* 2129 * Re-calculate the tsf id, as the master-slave relations depend on the 2130 * beacon interval, which was not known when the AP interface was added. 2131 */ 2132 if (vif->type == NL80211_IFTYPE_AP) 2133 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif); 2134 2135 mvmvif->ap_assoc_sta_count = 0; 2136 2137 /* Add the mac context */ 2138 ret = iwl_mvm_mac_ctxt_add(mvm, vif); 2139 if (ret) 2140 goto out_unlock; 2141 2142 /* Perform the binding */ 2143 ret = iwl_mvm_binding_add_vif(mvm, vif); 2144 if (ret) 2145 goto out_remove; 2146 2147 ret = iwl_mvm_add_mcast_sta(mvm, vif); 2148 if (ret) 2149 goto out_unbind; 2150 2151 /* Send the bcast station. At this stage the TBTT and DTIM time events 2152 * are added and applied to the scheduler */ 2153 ret = iwl_mvm_send_add_bcast_sta(mvm, vif); 2154 if (ret) 2155 goto out_rm_mcast; 2156 2157 /* must be set before quota calculations */ 2158 mvmvif->ap_ibss_active = true; 2159 2160 /* power updated needs to be done before quotas */ 2161 iwl_mvm_power_update_mac(mvm); 2162 2163 ret = iwl_mvm_update_quotas(mvm, false, NULL); 2164 if (ret) 2165 goto out_quota_failed; 2166 2167 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */ 2168 if (vif->p2p && mvm->p2p_device_vif) 2169 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL); 2170 2171 iwl_mvm_ref(mvm, IWL_MVM_REF_AP_IBSS); 2172 2173 iwl_mvm_bt_coex_vif_change(mvm); 2174 2175 /* we don't support TDLS during DCM */ 2176 if (iwl_mvm_phy_ctx_count(mvm) > 1) 2177 iwl_mvm_teardown_tdls_peers(mvm); 2178 2179 goto out_unlock; 2180 2181 out_quota_failed: 2182 iwl_mvm_power_update_mac(mvm); 2183 mvmvif->ap_ibss_active = false; 2184 iwl_mvm_send_rm_bcast_sta(mvm, vif); 2185 out_rm_mcast: 2186 iwl_mvm_rm_mcast_sta(mvm, vif); 2187 out_unbind: 2188 iwl_mvm_binding_remove_vif(mvm, vif); 2189 out_remove: 2190 iwl_mvm_mac_ctxt_remove(mvm, vif); 2191 out_unlock: 2192 mutex_unlock(&mvm->mutex); 2193 iwl_mvm_unref(mvm, IWL_MVM_REF_START_AP); 2194 return ret; 2195 } 2196 2197 static void iwl_mvm_stop_ap_ibss(struct ieee80211_hw *hw, 2198 struct ieee80211_vif *vif) 2199 { 2200 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2201 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2202 2203 iwl_mvm_prepare_mac_removal(mvm, vif); 2204 2205 mutex_lock(&mvm->mutex); 2206 2207 /* Handle AP stop while in CSA */ 2208 if (rcu_access_pointer(mvm->csa_vif) == vif) { 2209 iwl_mvm_remove_time_event(mvm, mvmvif, 2210 &mvmvif->time_event_data); 2211 RCU_INIT_POINTER(mvm->csa_vif, NULL); 2212 mvmvif->csa_countdown = false; 2213 } 2214 2215 if (rcu_access_pointer(mvm->csa_tx_blocked_vif) == vif) { 2216 RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL); 2217 mvm->csa_tx_block_bcn_timeout = 0; 2218 } 2219 2220 mvmvif->ap_ibss_active = false; 2221 mvm->ap_last_beacon_gp2 = 0; 2222 2223 iwl_mvm_bt_coex_vif_change(mvm); 2224 2225 iwl_mvm_unref(mvm, IWL_MVM_REF_AP_IBSS); 2226 2227 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */ 2228 if (vif->p2p && mvm->p2p_device_vif) 2229 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL); 2230 2231 iwl_mvm_update_quotas(mvm, false, NULL); 2232 2233 /* 2234 * This is not very nice, but the simplest: 2235 * For older FWs removing the mcast sta before the bcast station may 2236 * cause assert 0x2b00. 2237 * This is fixed in later FW (which will stop beaconing when removing 2238 * bcast station). 2239 * So make the order of removal depend on the TLV 2240 */ 2241 if (!fw_has_api(&mvm->fw->ucode_capa, IWL_UCODE_TLV_API_STA_TYPE)) 2242 iwl_mvm_rm_mcast_sta(mvm, vif); 2243 iwl_mvm_send_rm_bcast_sta(mvm, vif); 2244 if (fw_has_api(&mvm->fw->ucode_capa, IWL_UCODE_TLV_API_STA_TYPE)) 2245 iwl_mvm_rm_mcast_sta(mvm, vif); 2246 iwl_mvm_binding_remove_vif(mvm, vif); 2247 2248 iwl_mvm_power_update_mac(mvm); 2249 2250 iwl_mvm_mac_ctxt_remove(mvm, vif); 2251 2252 mutex_unlock(&mvm->mutex); 2253 } 2254 2255 static void 2256 iwl_mvm_bss_info_changed_ap_ibss(struct iwl_mvm *mvm, 2257 struct ieee80211_vif *vif, 2258 struct ieee80211_bss_conf *bss_conf, 2259 u32 changes) 2260 { 2261 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2262 2263 /* Changes will be applied when the AP/IBSS is started */ 2264 if (!mvmvif->ap_ibss_active) 2265 return; 2266 2267 if (changes & (BSS_CHANGED_ERP_CTS_PROT | BSS_CHANGED_HT | 2268 BSS_CHANGED_BANDWIDTH | BSS_CHANGED_QOS) && 2269 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL)) 2270 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr); 2271 2272 /* Need to send a new beacon template to the FW */ 2273 if (changes & BSS_CHANGED_BEACON && 2274 iwl_mvm_mac_ctxt_beacon_changed(mvm, vif)) 2275 IWL_WARN(mvm, "Failed updating beacon data\n"); 2276 2277 if (changes & BSS_CHANGED_TXPOWER) { 2278 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n", 2279 bss_conf->txpower); 2280 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower); 2281 } 2282 } 2283 2284 static void iwl_mvm_bss_info_changed(struct ieee80211_hw *hw, 2285 struct ieee80211_vif *vif, 2286 struct ieee80211_bss_conf *bss_conf, 2287 u32 changes) 2288 { 2289 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2290 2291 /* 2292 * iwl_mvm_bss_info_changed_station() might call 2293 * iwl_mvm_protect_session(), which reads directly from 2294 * the device (the system time), so make sure it is available. 2295 */ 2296 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_BSS_CHANGED)) 2297 return; 2298 2299 mutex_lock(&mvm->mutex); 2300 2301 if (changes & BSS_CHANGED_IDLE && !bss_conf->idle) 2302 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, true); 2303 2304 switch (vif->type) { 2305 case NL80211_IFTYPE_STATION: 2306 iwl_mvm_bss_info_changed_station(mvm, vif, bss_conf, changes); 2307 break; 2308 case NL80211_IFTYPE_AP: 2309 case NL80211_IFTYPE_ADHOC: 2310 iwl_mvm_bss_info_changed_ap_ibss(mvm, vif, bss_conf, changes); 2311 break; 2312 case NL80211_IFTYPE_MONITOR: 2313 if (changes & BSS_CHANGED_MU_GROUPS) 2314 iwl_mvm_update_mu_groups(mvm, vif); 2315 break; 2316 default: 2317 /* shouldn't happen */ 2318 WARN_ON_ONCE(1); 2319 } 2320 2321 mutex_unlock(&mvm->mutex); 2322 iwl_mvm_unref(mvm, IWL_MVM_REF_BSS_CHANGED); 2323 } 2324 2325 static int iwl_mvm_mac_hw_scan(struct ieee80211_hw *hw, 2326 struct ieee80211_vif *vif, 2327 struct ieee80211_scan_request *hw_req) 2328 { 2329 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2330 int ret; 2331 2332 if (hw_req->req.n_channels == 0 || 2333 hw_req->req.n_channels > mvm->fw->ucode_capa.n_scan_channels) 2334 return -EINVAL; 2335 2336 mutex_lock(&mvm->mutex); 2337 ret = iwl_mvm_reg_scan_start(mvm, vif, &hw_req->req, &hw_req->ies); 2338 mutex_unlock(&mvm->mutex); 2339 2340 return ret; 2341 } 2342 2343 static void iwl_mvm_mac_cancel_hw_scan(struct ieee80211_hw *hw, 2344 struct ieee80211_vif *vif) 2345 { 2346 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2347 2348 mutex_lock(&mvm->mutex); 2349 2350 /* Due to a race condition, it's possible that mac80211 asks 2351 * us to stop a hw_scan when it's already stopped. This can 2352 * happen, for instance, if we stopped the scan ourselves, 2353 * called ieee80211_scan_completed() and the userspace called 2354 * cancel scan scan before ieee80211_scan_work() could run. 2355 * To handle that, simply return if the scan is not running. 2356 */ 2357 if (mvm->scan_status & IWL_MVM_SCAN_REGULAR) 2358 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_REGULAR, true); 2359 2360 mutex_unlock(&mvm->mutex); 2361 } 2362 2363 static void 2364 iwl_mvm_mac_allow_buffered_frames(struct ieee80211_hw *hw, 2365 struct ieee80211_sta *sta, u16 tids, 2366 int num_frames, 2367 enum ieee80211_frame_release_type reason, 2368 bool more_data) 2369 { 2370 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2371 2372 /* Called when we need to transmit (a) frame(s) from mac80211 */ 2373 2374 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames, 2375 tids, more_data, false); 2376 } 2377 2378 static void 2379 iwl_mvm_mac_release_buffered_frames(struct ieee80211_hw *hw, 2380 struct ieee80211_sta *sta, u16 tids, 2381 int num_frames, 2382 enum ieee80211_frame_release_type reason, 2383 bool more_data) 2384 { 2385 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2386 2387 /* Called when we need to transmit (a) frame(s) from agg or dqa queue */ 2388 2389 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames, 2390 tids, more_data, true); 2391 } 2392 2393 static void __iwl_mvm_mac_sta_notify(struct ieee80211_hw *hw, 2394 enum sta_notify_cmd cmd, 2395 struct ieee80211_sta *sta) 2396 { 2397 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2398 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); 2399 unsigned long txqs = 0, tids = 0; 2400 int tid; 2401 2402 spin_lock_bh(&mvmsta->lock); 2403 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 2404 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid]; 2405 2406 if (!iwl_mvm_is_dqa_supported(mvm) && 2407 tid_data->state != IWL_AGG_ON && 2408 tid_data->state != IWL_EMPTYING_HW_QUEUE_DELBA) 2409 continue; 2410 2411 if (tid_data->txq_id == IWL_MVM_INVALID_QUEUE) 2412 continue; 2413 2414 __set_bit(tid_data->txq_id, &txqs); 2415 2416 if (iwl_mvm_tid_queued(mvm, tid_data) == 0) 2417 continue; 2418 2419 __set_bit(tid, &tids); 2420 } 2421 2422 switch (cmd) { 2423 case STA_NOTIFY_SLEEP: 2424 if (atomic_read(&mvm->pending_frames[mvmsta->sta_id]) > 0) 2425 ieee80211_sta_block_awake(hw, sta, true); 2426 2427 for_each_set_bit(tid, &tids, IWL_MAX_TID_COUNT) 2428 ieee80211_sta_set_buffered(sta, tid, true); 2429 2430 if (txqs) 2431 iwl_trans_freeze_txq_timer(mvm->trans, txqs, true); 2432 /* 2433 * The fw updates the STA to be asleep. Tx packets on the Tx 2434 * queues to this station will not be transmitted. The fw will 2435 * send a Tx response with TX_STATUS_FAIL_DEST_PS. 2436 */ 2437 break; 2438 case STA_NOTIFY_AWAKE: 2439 if (WARN_ON(mvmsta->sta_id == IWL_MVM_INVALID_STA)) 2440 break; 2441 2442 if (txqs) 2443 iwl_trans_freeze_txq_timer(mvm->trans, txqs, false); 2444 iwl_mvm_sta_modify_ps_wake(mvm, sta); 2445 break; 2446 default: 2447 break; 2448 } 2449 spin_unlock_bh(&mvmsta->lock); 2450 } 2451 2452 static void iwl_mvm_mac_sta_notify(struct ieee80211_hw *hw, 2453 struct ieee80211_vif *vif, 2454 enum sta_notify_cmd cmd, 2455 struct ieee80211_sta *sta) 2456 { 2457 __iwl_mvm_mac_sta_notify(hw, cmd, sta); 2458 } 2459 2460 void iwl_mvm_sta_pm_notif(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb) 2461 { 2462 struct iwl_rx_packet *pkt = rxb_addr(rxb); 2463 struct iwl_mvm_pm_state_notification *notif = (void *)pkt->data; 2464 struct ieee80211_sta *sta; 2465 struct iwl_mvm_sta *mvmsta; 2466 bool sleeping = (notif->type != IWL_MVM_PM_EVENT_AWAKE); 2467 2468 if (WARN_ON(notif->sta_id >= ARRAY_SIZE(mvm->fw_id_to_mac_id))) 2469 return; 2470 2471 rcu_read_lock(); 2472 sta = rcu_dereference(mvm->fw_id_to_mac_id[notif->sta_id]); 2473 if (WARN_ON(IS_ERR_OR_NULL(sta))) { 2474 rcu_read_unlock(); 2475 return; 2476 } 2477 2478 mvmsta = iwl_mvm_sta_from_mac80211(sta); 2479 2480 if (!mvmsta->vif || 2481 mvmsta->vif->type != NL80211_IFTYPE_AP) { 2482 rcu_read_unlock(); 2483 return; 2484 } 2485 2486 if (mvmsta->sleeping != sleeping) { 2487 mvmsta->sleeping = sleeping; 2488 __iwl_mvm_mac_sta_notify(mvm->hw, 2489 sleeping ? STA_NOTIFY_SLEEP : STA_NOTIFY_AWAKE, 2490 sta); 2491 ieee80211_sta_ps_transition(sta, sleeping); 2492 } 2493 2494 if (sleeping) { 2495 switch (notif->type) { 2496 case IWL_MVM_PM_EVENT_AWAKE: 2497 case IWL_MVM_PM_EVENT_ASLEEP: 2498 break; 2499 case IWL_MVM_PM_EVENT_UAPSD: 2500 ieee80211_sta_uapsd_trigger(sta, IEEE80211_NUM_TIDS); 2501 break; 2502 case IWL_MVM_PM_EVENT_PS_POLL: 2503 ieee80211_sta_pspoll(sta); 2504 break; 2505 default: 2506 break; 2507 } 2508 } 2509 2510 rcu_read_unlock(); 2511 } 2512 2513 static void iwl_mvm_sta_pre_rcu_remove(struct ieee80211_hw *hw, 2514 struct ieee80211_vif *vif, 2515 struct ieee80211_sta *sta) 2516 { 2517 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2518 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta); 2519 2520 /* 2521 * This is called before mac80211 does RCU synchronisation, 2522 * so here we already invalidate our internal RCU-protected 2523 * station pointer. The rest of the code will thus no longer 2524 * be able to find the station this way, and we don't rely 2525 * on further RCU synchronisation after the sta_state() 2526 * callback deleted the station. 2527 */ 2528 mutex_lock(&mvm->mutex); 2529 if (sta == rcu_access_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id])) 2530 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id], 2531 ERR_PTR(-ENOENT)); 2532 2533 mutex_unlock(&mvm->mutex); 2534 } 2535 2536 static void iwl_mvm_check_uapsd(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 2537 const u8 *bssid) 2538 { 2539 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_UAPSD_SUPPORT)) 2540 return; 2541 2542 if (vif->p2p && !iwl_mvm_is_p2p_scm_uapsd_supported(mvm)) { 2543 vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD; 2544 return; 2545 } 2546 2547 if (!vif->p2p && 2548 (iwlwifi_mod_params.uapsd_disable & IWL_DISABLE_UAPSD_BSS)) { 2549 vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD; 2550 return; 2551 } 2552 2553 vif->driver_flags |= IEEE80211_VIF_SUPPORTS_UAPSD; 2554 } 2555 2556 static void 2557 iwl_mvm_tdls_check_trigger(struct iwl_mvm *mvm, 2558 struct ieee80211_vif *vif, u8 *peer_addr, 2559 enum nl80211_tdls_operation action) 2560 { 2561 struct iwl_fw_dbg_trigger_tlv *trig; 2562 struct iwl_fw_dbg_trigger_tdls *tdls_trig; 2563 2564 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_TDLS)) 2565 return; 2566 2567 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_TDLS); 2568 tdls_trig = (void *)trig->data; 2569 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 2570 return; 2571 2572 if (!(tdls_trig->action_bitmap & BIT(action))) 2573 return; 2574 2575 if (tdls_trig->peer_mode && 2576 memcmp(tdls_trig->peer, peer_addr, ETH_ALEN) != 0) 2577 return; 2578 2579 iwl_mvm_fw_dbg_collect_trig(mvm, trig, 2580 "TDLS event occurred, peer %pM, action %d", 2581 peer_addr, action); 2582 } 2583 2584 static void iwl_mvm_purge_deferred_tx_frames(struct iwl_mvm *mvm, 2585 struct iwl_mvm_sta *mvm_sta) 2586 { 2587 struct iwl_mvm_tid_data *tid_data; 2588 struct sk_buff *skb; 2589 int i; 2590 2591 spin_lock_bh(&mvm_sta->lock); 2592 for (i = 0; i <= IWL_MAX_TID_COUNT; i++) { 2593 tid_data = &mvm_sta->tid_data[i]; 2594 while ((skb = __skb_dequeue(&tid_data->deferred_tx_frames))) 2595 ieee80211_free_txskb(mvm->hw, skb); 2596 } 2597 spin_unlock_bh(&mvm_sta->lock); 2598 } 2599 2600 static int iwl_mvm_mac_sta_state(struct ieee80211_hw *hw, 2601 struct ieee80211_vif *vif, 2602 struct ieee80211_sta *sta, 2603 enum ieee80211_sta_state old_state, 2604 enum ieee80211_sta_state new_state) 2605 { 2606 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2607 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2608 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta); 2609 int ret; 2610 2611 IWL_DEBUG_MAC80211(mvm, "station %pM state change %d->%d\n", 2612 sta->addr, old_state, new_state); 2613 2614 /* this would be a mac80211 bug ... but don't crash */ 2615 if (WARN_ON_ONCE(!mvmvif->phy_ctxt)) 2616 return -EINVAL; 2617 2618 /* if a STA is being removed, reuse its ID */ 2619 flush_work(&mvm->sta_drained_wk); 2620 2621 /* 2622 * If we are in a STA removal flow and in DQA mode: 2623 * 2624 * This is after the sync_rcu part, so the queues have already been 2625 * flushed. No more TXs on their way in mac80211's path, and no more in 2626 * the queues. 2627 * Also, we won't be getting any new TX frames for this station. 2628 * What we might have are deferred TX frames that need to be taken care 2629 * of. 2630 * 2631 * Drop any still-queued deferred-frame before removing the STA, and 2632 * make sure the worker is no longer handling frames for this STA. 2633 */ 2634 if (old_state == IEEE80211_STA_NONE && 2635 new_state == IEEE80211_STA_NOTEXIST && 2636 iwl_mvm_is_dqa_supported(mvm)) { 2637 iwl_mvm_purge_deferred_tx_frames(mvm, mvm_sta); 2638 flush_work(&mvm->add_stream_wk); 2639 2640 /* 2641 * No need to make sure deferred TX indication is off since the 2642 * worker will already remove it if it was on 2643 */ 2644 } 2645 2646 mutex_lock(&mvm->mutex); 2647 /* track whether or not the station is associated */ 2648 mvm_sta->associated = new_state >= IEEE80211_STA_ASSOC; 2649 2650 if (old_state == IEEE80211_STA_NOTEXIST && 2651 new_state == IEEE80211_STA_NONE) { 2652 /* 2653 * Firmware bug - it'll crash if the beacon interval is less 2654 * than 16. We can't avoid connecting at all, so refuse the 2655 * station state change, this will cause mac80211 to abandon 2656 * attempts to connect to this AP, and eventually wpa_s will 2657 * blacklist the AP... 2658 */ 2659 if (vif->type == NL80211_IFTYPE_STATION && 2660 vif->bss_conf.beacon_int < 16) { 2661 IWL_ERR(mvm, 2662 "AP %pM beacon interval is %d, refusing due to firmware bug!\n", 2663 sta->addr, vif->bss_conf.beacon_int); 2664 ret = -EINVAL; 2665 goto out_unlock; 2666 } 2667 2668 if (sta->tdls && 2669 (vif->p2p || 2670 iwl_mvm_tdls_sta_count(mvm, NULL) == 2671 IWL_MVM_TDLS_STA_COUNT || 2672 iwl_mvm_phy_ctx_count(mvm) > 1)) { 2673 IWL_DEBUG_MAC80211(mvm, "refusing TDLS sta\n"); 2674 ret = -EBUSY; 2675 goto out_unlock; 2676 } 2677 2678 ret = iwl_mvm_add_sta(mvm, vif, sta); 2679 if (sta->tdls && ret == 0) { 2680 iwl_mvm_recalc_tdls_state(mvm, vif, true); 2681 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr, 2682 NL80211_TDLS_SETUP); 2683 } 2684 } else if (old_state == IEEE80211_STA_NONE && 2685 new_state == IEEE80211_STA_AUTH) { 2686 /* 2687 * EBS may be disabled due to previous failures reported by FW. 2688 * Reset EBS status here assuming environment has been changed. 2689 */ 2690 mvm->last_ebs_successful = true; 2691 iwl_mvm_check_uapsd(mvm, vif, sta->addr); 2692 ret = 0; 2693 } else if (old_state == IEEE80211_STA_AUTH && 2694 new_state == IEEE80211_STA_ASSOC) { 2695 if (vif->type == NL80211_IFTYPE_AP) { 2696 mvmvif->ap_assoc_sta_count++; 2697 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 2698 } 2699 2700 iwl_mvm_rs_rate_init(mvm, sta, mvmvif->phy_ctxt->channel->band, 2701 true); 2702 ret = iwl_mvm_update_sta(mvm, vif, sta); 2703 } else if (old_state == IEEE80211_STA_ASSOC && 2704 new_state == IEEE80211_STA_AUTHORIZED) { 2705 2706 /* we don't support TDLS during DCM */ 2707 if (iwl_mvm_phy_ctx_count(mvm) > 1) 2708 iwl_mvm_teardown_tdls_peers(mvm); 2709 2710 if (sta->tdls) 2711 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr, 2712 NL80211_TDLS_ENABLE_LINK); 2713 2714 /* enable beacon filtering */ 2715 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0)); 2716 ret = 0; 2717 } else if (old_state == IEEE80211_STA_AUTHORIZED && 2718 new_state == IEEE80211_STA_ASSOC) { 2719 /* disable beacon filtering */ 2720 WARN_ON(iwl_mvm_disable_beacon_filter(mvm, vif, 0)); 2721 ret = 0; 2722 } else if (old_state == IEEE80211_STA_ASSOC && 2723 new_state == IEEE80211_STA_AUTH) { 2724 if (vif->type == NL80211_IFTYPE_AP) { 2725 mvmvif->ap_assoc_sta_count--; 2726 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 2727 } 2728 ret = 0; 2729 } else if (old_state == IEEE80211_STA_AUTH && 2730 new_state == IEEE80211_STA_NONE) { 2731 ret = 0; 2732 } else if (old_state == IEEE80211_STA_NONE && 2733 new_state == IEEE80211_STA_NOTEXIST) { 2734 ret = iwl_mvm_rm_sta(mvm, vif, sta); 2735 if (sta->tdls) { 2736 iwl_mvm_recalc_tdls_state(mvm, vif, false); 2737 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr, 2738 NL80211_TDLS_DISABLE_LINK); 2739 } 2740 } else { 2741 ret = -EIO; 2742 } 2743 out_unlock: 2744 mutex_unlock(&mvm->mutex); 2745 2746 if (sta->tdls && ret == 0) { 2747 if (old_state == IEEE80211_STA_NOTEXIST && 2748 new_state == IEEE80211_STA_NONE) 2749 ieee80211_reserve_tid(sta, IWL_MVM_TDLS_FW_TID); 2750 else if (old_state == IEEE80211_STA_NONE && 2751 new_state == IEEE80211_STA_NOTEXIST) 2752 ieee80211_unreserve_tid(sta, IWL_MVM_TDLS_FW_TID); 2753 } 2754 2755 return ret; 2756 } 2757 2758 static int iwl_mvm_mac_set_rts_threshold(struct ieee80211_hw *hw, u32 value) 2759 { 2760 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2761 2762 mvm->rts_threshold = value; 2763 2764 return 0; 2765 } 2766 2767 static void iwl_mvm_sta_rc_update(struct ieee80211_hw *hw, 2768 struct ieee80211_vif *vif, 2769 struct ieee80211_sta *sta, u32 changed) 2770 { 2771 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2772 2773 if (vif->type == NL80211_IFTYPE_STATION && 2774 changed & IEEE80211_RC_NSS_CHANGED) 2775 iwl_mvm_sf_update(mvm, vif, false); 2776 } 2777 2778 static int iwl_mvm_mac_conf_tx(struct ieee80211_hw *hw, 2779 struct ieee80211_vif *vif, u16 ac, 2780 const struct ieee80211_tx_queue_params *params) 2781 { 2782 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2783 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2784 2785 mvmvif->queue_params[ac] = *params; 2786 2787 /* 2788 * No need to update right away, we'll get BSS_CHANGED_QOS 2789 * The exception is P2P_DEVICE interface which needs immediate update. 2790 */ 2791 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) { 2792 int ret; 2793 2794 mutex_lock(&mvm->mutex); 2795 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 2796 mutex_unlock(&mvm->mutex); 2797 return ret; 2798 } 2799 return 0; 2800 } 2801 2802 static void iwl_mvm_mac_mgd_prepare_tx(struct ieee80211_hw *hw, 2803 struct ieee80211_vif *vif) 2804 { 2805 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2806 u32 duration = IWL_MVM_TE_SESSION_PROTECTION_MAX_TIME_MS; 2807 u32 min_duration = IWL_MVM_TE_SESSION_PROTECTION_MIN_TIME_MS; 2808 2809 if (WARN_ON_ONCE(vif->bss_conf.assoc)) 2810 return; 2811 2812 /* 2813 * iwl_mvm_protect_session() reads directly from the device 2814 * (the system time), so make sure it is available. 2815 */ 2816 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PREPARE_TX)) 2817 return; 2818 2819 mutex_lock(&mvm->mutex); 2820 /* Try really hard to protect the session and hear a beacon */ 2821 iwl_mvm_protect_session(mvm, vif, duration, min_duration, 500, false); 2822 mutex_unlock(&mvm->mutex); 2823 2824 iwl_mvm_unref(mvm, IWL_MVM_REF_PREPARE_TX); 2825 } 2826 2827 static int iwl_mvm_mac_sched_scan_start(struct ieee80211_hw *hw, 2828 struct ieee80211_vif *vif, 2829 struct cfg80211_sched_scan_request *req, 2830 struct ieee80211_scan_ies *ies) 2831 { 2832 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2833 2834 int ret; 2835 2836 mutex_lock(&mvm->mutex); 2837 2838 if (!vif->bss_conf.idle) { 2839 ret = -EBUSY; 2840 goto out; 2841 } 2842 2843 ret = iwl_mvm_sched_scan_start(mvm, vif, req, ies, IWL_MVM_SCAN_SCHED); 2844 2845 out: 2846 mutex_unlock(&mvm->mutex); 2847 return ret; 2848 } 2849 2850 static int iwl_mvm_mac_sched_scan_stop(struct ieee80211_hw *hw, 2851 struct ieee80211_vif *vif) 2852 { 2853 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2854 int ret; 2855 2856 mutex_lock(&mvm->mutex); 2857 2858 /* Due to a race condition, it's possible that mac80211 asks 2859 * us to stop a sched_scan when it's already stopped. This 2860 * can happen, for instance, if we stopped the scan ourselves, 2861 * called ieee80211_sched_scan_stopped() and the userspace called 2862 * stop sched scan scan before ieee80211_sched_scan_stopped_work() 2863 * could run. To handle this, simply return if the scan is 2864 * not running. 2865 */ 2866 if (!(mvm->scan_status & IWL_MVM_SCAN_SCHED)) { 2867 mutex_unlock(&mvm->mutex); 2868 return 0; 2869 } 2870 2871 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, false); 2872 mutex_unlock(&mvm->mutex); 2873 iwl_mvm_wait_for_async_handlers(mvm); 2874 2875 return ret; 2876 } 2877 2878 static int iwl_mvm_mac_set_key(struct ieee80211_hw *hw, 2879 enum set_key_cmd cmd, 2880 struct ieee80211_vif *vif, 2881 struct ieee80211_sta *sta, 2882 struct ieee80211_key_conf *key) 2883 { 2884 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2885 struct iwl_mvm_sta *mvmsta; 2886 struct iwl_mvm_key_pn *ptk_pn; 2887 int keyidx = key->keyidx; 2888 int ret; 2889 u8 key_offset; 2890 2891 if (iwlwifi_mod_params.swcrypto) { 2892 IWL_DEBUG_MAC80211(mvm, "leave - hwcrypto disabled\n"); 2893 return -EOPNOTSUPP; 2894 } 2895 2896 switch (key->cipher) { 2897 case WLAN_CIPHER_SUITE_TKIP: 2898 key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC; 2899 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE; 2900 break; 2901 case WLAN_CIPHER_SUITE_CCMP: 2902 case WLAN_CIPHER_SUITE_GCMP: 2903 case WLAN_CIPHER_SUITE_GCMP_256: 2904 if (!iwl_mvm_has_new_tx_api(mvm)) 2905 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE; 2906 break; 2907 case WLAN_CIPHER_SUITE_AES_CMAC: 2908 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 2909 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 2910 WARN_ON_ONCE(!ieee80211_hw_check(hw, MFP_CAPABLE)); 2911 break; 2912 case WLAN_CIPHER_SUITE_WEP40: 2913 case WLAN_CIPHER_SUITE_WEP104: 2914 /* For non-client mode, only use WEP keys for TX as we probably 2915 * don't have a station yet anyway and would then have to keep 2916 * track of the keys, linking them to each of the clients/peers 2917 * as they appear. For now, don't do that, for performance WEP 2918 * offload doesn't really matter much, but we need it for some 2919 * other offload features in client mode. 2920 */ 2921 if (vif->type != NL80211_IFTYPE_STATION) 2922 return 0; 2923 break; 2924 default: 2925 /* currently FW supports only one optional cipher scheme */ 2926 if (hw->n_cipher_schemes && 2927 hw->cipher_schemes->cipher == key->cipher) 2928 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE; 2929 else 2930 return -EOPNOTSUPP; 2931 } 2932 2933 mutex_lock(&mvm->mutex); 2934 2935 switch (cmd) { 2936 case SET_KEY: 2937 if ((vif->type == NL80211_IFTYPE_ADHOC || 2938 vif->type == NL80211_IFTYPE_AP) && !sta) { 2939 /* 2940 * GTK on AP interface is a TX-only key, return 0; 2941 * on IBSS they're per-station and because we're lazy 2942 * we don't support them for RX, so do the same. 2943 * CMAC/GMAC in AP/IBSS modes must be done in software. 2944 */ 2945 if (key->cipher == WLAN_CIPHER_SUITE_AES_CMAC || 2946 key->cipher == WLAN_CIPHER_SUITE_BIP_GMAC_128 || 2947 key->cipher == WLAN_CIPHER_SUITE_BIP_GMAC_256) 2948 ret = -EOPNOTSUPP; 2949 else 2950 ret = 0; 2951 2952 if (key->cipher != WLAN_CIPHER_SUITE_GCMP && 2953 key->cipher != WLAN_CIPHER_SUITE_GCMP_256 && 2954 !iwl_mvm_has_new_tx_api(mvm)) { 2955 key->hw_key_idx = STA_KEY_IDX_INVALID; 2956 break; 2957 } 2958 } 2959 2960 /* During FW restart, in order to restore the state as it was, 2961 * don't try to reprogram keys we previously failed for. 2962 */ 2963 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 2964 key->hw_key_idx == STA_KEY_IDX_INVALID) { 2965 IWL_DEBUG_MAC80211(mvm, 2966 "skip invalid idx key programming during restart\n"); 2967 ret = 0; 2968 break; 2969 } 2970 2971 if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 2972 sta && iwl_mvm_has_new_rx_api(mvm) && 2973 key->flags & IEEE80211_KEY_FLAG_PAIRWISE && 2974 (key->cipher == WLAN_CIPHER_SUITE_CCMP || 2975 key->cipher == WLAN_CIPHER_SUITE_GCMP || 2976 key->cipher == WLAN_CIPHER_SUITE_GCMP_256)) { 2977 struct ieee80211_key_seq seq; 2978 int tid, q; 2979 2980 mvmsta = iwl_mvm_sta_from_mac80211(sta); 2981 WARN_ON(rcu_access_pointer(mvmsta->ptk_pn[keyidx])); 2982 ptk_pn = kzalloc(sizeof(*ptk_pn) + 2983 mvm->trans->num_rx_queues * 2984 sizeof(ptk_pn->q[0]), 2985 GFP_KERNEL); 2986 if (!ptk_pn) { 2987 ret = -ENOMEM; 2988 break; 2989 } 2990 2991 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 2992 ieee80211_get_key_rx_seq(key, tid, &seq); 2993 for (q = 0; q < mvm->trans->num_rx_queues; q++) 2994 memcpy(ptk_pn->q[q].pn[tid], 2995 seq.ccmp.pn, 2996 IEEE80211_CCMP_PN_LEN); 2997 } 2998 2999 rcu_assign_pointer(mvmsta->ptk_pn[keyidx], ptk_pn); 3000 } 3001 3002 /* in HW restart reuse the index, otherwise request a new one */ 3003 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) 3004 key_offset = key->hw_key_idx; 3005 else 3006 key_offset = STA_KEY_IDX_INVALID; 3007 3008 IWL_DEBUG_MAC80211(mvm, "set hwcrypto key\n"); 3009 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, key_offset); 3010 if (ret) { 3011 IWL_WARN(mvm, "set key failed\n"); 3012 /* 3013 * can't add key for RX, but we don't need it 3014 * in the device for TX so still return 0 3015 */ 3016 key->hw_key_idx = STA_KEY_IDX_INVALID; 3017 ret = 0; 3018 } 3019 3020 break; 3021 case DISABLE_KEY: 3022 if (key->hw_key_idx == STA_KEY_IDX_INVALID) { 3023 ret = 0; 3024 break; 3025 } 3026 3027 if (sta && iwl_mvm_has_new_rx_api(mvm) && 3028 key->flags & IEEE80211_KEY_FLAG_PAIRWISE && 3029 (key->cipher == WLAN_CIPHER_SUITE_CCMP || 3030 key->cipher == WLAN_CIPHER_SUITE_GCMP || 3031 key->cipher == WLAN_CIPHER_SUITE_GCMP_256)) { 3032 mvmsta = iwl_mvm_sta_from_mac80211(sta); 3033 ptk_pn = rcu_dereference_protected( 3034 mvmsta->ptk_pn[keyidx], 3035 lockdep_is_held(&mvm->mutex)); 3036 RCU_INIT_POINTER(mvmsta->ptk_pn[keyidx], NULL); 3037 if (ptk_pn) 3038 kfree_rcu(ptk_pn, rcu_head); 3039 } 3040 3041 IWL_DEBUG_MAC80211(mvm, "disable hwcrypto key\n"); 3042 ret = iwl_mvm_remove_sta_key(mvm, vif, sta, key); 3043 break; 3044 default: 3045 ret = -EINVAL; 3046 } 3047 3048 mutex_unlock(&mvm->mutex); 3049 return ret; 3050 } 3051 3052 static void iwl_mvm_mac_update_tkip_key(struct ieee80211_hw *hw, 3053 struct ieee80211_vif *vif, 3054 struct ieee80211_key_conf *keyconf, 3055 struct ieee80211_sta *sta, 3056 u32 iv32, u16 *phase1key) 3057 { 3058 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3059 3060 if (keyconf->hw_key_idx == STA_KEY_IDX_INVALID) 3061 return; 3062 3063 iwl_mvm_update_tkip_key(mvm, vif, keyconf, sta, iv32, phase1key); 3064 } 3065 3066 3067 static bool iwl_mvm_rx_aux_roc(struct iwl_notif_wait_data *notif_wait, 3068 struct iwl_rx_packet *pkt, void *data) 3069 { 3070 struct iwl_mvm *mvm = 3071 container_of(notif_wait, struct iwl_mvm, notif_wait); 3072 struct iwl_hs20_roc_res *resp; 3073 int resp_len = iwl_rx_packet_payload_len(pkt); 3074 struct iwl_mvm_time_event_data *te_data = data; 3075 3076 if (WARN_ON(pkt->hdr.cmd != HOT_SPOT_CMD)) 3077 return true; 3078 3079 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) { 3080 IWL_ERR(mvm, "Invalid HOT_SPOT_CMD response\n"); 3081 return true; 3082 } 3083 3084 resp = (void *)pkt->data; 3085 3086 IWL_DEBUG_TE(mvm, 3087 "Aux ROC: Recieved response from ucode: status=%d uid=%d\n", 3088 resp->status, resp->event_unique_id); 3089 3090 te_data->uid = le32_to_cpu(resp->event_unique_id); 3091 IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n", 3092 te_data->uid); 3093 3094 spin_lock_bh(&mvm->time_event_lock); 3095 list_add_tail(&te_data->list, &mvm->aux_roc_te_list); 3096 spin_unlock_bh(&mvm->time_event_lock); 3097 3098 return true; 3099 } 3100 3101 #define AUX_ROC_MIN_DURATION MSEC_TO_TU(100) 3102 #define AUX_ROC_MIN_DELAY MSEC_TO_TU(200) 3103 #define AUX_ROC_MAX_DELAY MSEC_TO_TU(600) 3104 #define AUX_ROC_SAFETY_BUFFER MSEC_TO_TU(20) 3105 #define AUX_ROC_MIN_SAFETY_BUFFER MSEC_TO_TU(10) 3106 static int iwl_mvm_send_aux_roc_cmd(struct iwl_mvm *mvm, 3107 struct ieee80211_channel *channel, 3108 struct ieee80211_vif *vif, 3109 int duration) 3110 { 3111 int res, time_reg = DEVICE_SYSTEM_TIME_REG; 3112 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3113 struct iwl_mvm_time_event_data *te_data = &mvmvif->hs_time_event_data; 3114 static const u16 time_event_response[] = { HOT_SPOT_CMD }; 3115 struct iwl_notification_wait wait_time_event; 3116 u32 dtim_interval = vif->bss_conf.dtim_period * 3117 vif->bss_conf.beacon_int; 3118 u32 req_dur, delay; 3119 struct iwl_hs20_roc_req aux_roc_req = { 3120 .action = cpu_to_le32(FW_CTXT_ACTION_ADD), 3121 .id_and_color = 3122 cpu_to_le32(FW_CMD_ID_AND_COLOR(MAC_INDEX_AUX, 0)), 3123 .sta_id_and_color = cpu_to_le32(mvm->aux_sta.sta_id), 3124 /* Set the channel info data */ 3125 .channel_info.band = (channel->band == NL80211_BAND_2GHZ) ? 3126 PHY_BAND_24 : PHY_BAND_5, 3127 .channel_info.channel = channel->hw_value, 3128 .channel_info.width = PHY_VHT_CHANNEL_MODE20, 3129 /* Set the time and duration */ 3130 .apply_time = cpu_to_le32(iwl_read_prph(mvm->trans, time_reg)), 3131 }; 3132 3133 delay = AUX_ROC_MIN_DELAY; 3134 req_dur = MSEC_TO_TU(duration); 3135 3136 /* 3137 * If we are associated we want the delay time to be at least one 3138 * dtim interval so that the FW can wait until after the DTIM and 3139 * then start the time event, this will potentially allow us to 3140 * remain off-channel for the max duration. 3141 * Since we want to use almost a whole dtim interval we would also 3142 * like the delay to be for 2-3 dtim intervals, in case there are 3143 * other time events with higher priority. 3144 */ 3145 if (vif->bss_conf.assoc) { 3146 delay = min_t(u32, dtim_interval * 3, AUX_ROC_MAX_DELAY); 3147 /* We cannot remain off-channel longer than the DTIM interval */ 3148 if (dtim_interval <= req_dur) { 3149 req_dur = dtim_interval - AUX_ROC_SAFETY_BUFFER; 3150 if (req_dur <= AUX_ROC_MIN_DURATION) 3151 req_dur = dtim_interval - 3152 AUX_ROC_MIN_SAFETY_BUFFER; 3153 } 3154 } 3155 3156 aux_roc_req.duration = cpu_to_le32(req_dur); 3157 aux_roc_req.apply_time_max_delay = cpu_to_le32(delay); 3158 3159 IWL_DEBUG_TE(mvm, 3160 "ROC: Requesting to remain on channel %u for %ums (requested = %ums, max_delay = %ums, dtim_interval = %ums)\n", 3161 channel->hw_value, req_dur, duration, delay, 3162 dtim_interval); 3163 /* Set the node address */ 3164 memcpy(aux_roc_req.node_addr, vif->addr, ETH_ALEN); 3165 3166 lockdep_assert_held(&mvm->mutex); 3167 3168 spin_lock_bh(&mvm->time_event_lock); 3169 3170 if (WARN_ON(te_data->id == HOT_SPOT_CMD)) { 3171 spin_unlock_bh(&mvm->time_event_lock); 3172 return -EIO; 3173 } 3174 3175 te_data->vif = vif; 3176 te_data->duration = duration; 3177 te_data->id = HOT_SPOT_CMD; 3178 3179 spin_unlock_bh(&mvm->time_event_lock); 3180 3181 /* 3182 * Use a notification wait, which really just processes the 3183 * command response and doesn't wait for anything, in order 3184 * to be able to process the response and get the UID inside 3185 * the RX path. Using CMD_WANT_SKB doesn't work because it 3186 * stores the buffer and then wakes up this thread, by which 3187 * time another notification (that the time event started) 3188 * might already be processed unsuccessfully. 3189 */ 3190 iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event, 3191 time_event_response, 3192 ARRAY_SIZE(time_event_response), 3193 iwl_mvm_rx_aux_roc, te_data); 3194 3195 res = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0, sizeof(aux_roc_req), 3196 &aux_roc_req); 3197 3198 if (res) { 3199 IWL_ERR(mvm, "Couldn't send HOT_SPOT_CMD: %d\n", res); 3200 iwl_remove_notification(&mvm->notif_wait, &wait_time_event); 3201 goto out_clear_te; 3202 } 3203 3204 /* No need to wait for anything, so just pass 1 (0 isn't valid) */ 3205 res = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1); 3206 /* should never fail */ 3207 WARN_ON_ONCE(res); 3208 3209 if (res) { 3210 out_clear_te: 3211 spin_lock_bh(&mvm->time_event_lock); 3212 iwl_mvm_te_clear_data(mvm, te_data); 3213 spin_unlock_bh(&mvm->time_event_lock); 3214 } 3215 3216 return res; 3217 } 3218 3219 static int iwl_mvm_roc(struct ieee80211_hw *hw, 3220 struct ieee80211_vif *vif, 3221 struct ieee80211_channel *channel, 3222 int duration, 3223 enum ieee80211_roc_type type) 3224 { 3225 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3226 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3227 struct cfg80211_chan_def chandef; 3228 struct iwl_mvm_phy_ctxt *phy_ctxt; 3229 int ret, i; 3230 3231 IWL_DEBUG_MAC80211(mvm, "enter (%d, %d, %d)\n", channel->hw_value, 3232 duration, type); 3233 3234 flush_work(&mvm->roc_done_wk); 3235 3236 mutex_lock(&mvm->mutex); 3237 3238 switch (vif->type) { 3239 case NL80211_IFTYPE_STATION: 3240 if (fw_has_capa(&mvm->fw->ucode_capa, 3241 IWL_UCODE_TLV_CAPA_HOTSPOT_SUPPORT)) { 3242 /* Use aux roc framework (HS20) */ 3243 ret = iwl_mvm_send_aux_roc_cmd(mvm, channel, 3244 vif, duration); 3245 goto out_unlock; 3246 } 3247 IWL_ERR(mvm, "hotspot not supported\n"); 3248 ret = -EINVAL; 3249 goto out_unlock; 3250 case NL80211_IFTYPE_P2P_DEVICE: 3251 /* handle below */ 3252 break; 3253 default: 3254 IWL_ERR(mvm, "vif isn't P2P_DEVICE: %d\n", vif->type); 3255 ret = -EINVAL; 3256 goto out_unlock; 3257 } 3258 3259 for (i = 0; i < NUM_PHY_CTX; i++) { 3260 phy_ctxt = &mvm->phy_ctxts[i]; 3261 if (phy_ctxt->ref == 0 || mvmvif->phy_ctxt == phy_ctxt) 3262 continue; 3263 3264 if (phy_ctxt->ref && channel == phy_ctxt->channel) { 3265 /* 3266 * Unbind the P2P_DEVICE from the current PHY context, 3267 * and if the PHY context is not used remove it. 3268 */ 3269 ret = iwl_mvm_binding_remove_vif(mvm, vif); 3270 if (WARN(ret, "Failed unbinding P2P_DEVICE\n")) 3271 goto out_unlock; 3272 3273 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt); 3274 3275 /* Bind the P2P_DEVICE to the current PHY Context */ 3276 mvmvif->phy_ctxt = phy_ctxt; 3277 3278 ret = iwl_mvm_binding_add_vif(mvm, vif); 3279 if (WARN(ret, "Failed binding P2P_DEVICE\n")) 3280 goto out_unlock; 3281 3282 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt); 3283 goto schedule_time_event; 3284 } 3285 } 3286 3287 /* Need to update the PHY context only if the ROC channel changed */ 3288 if (channel == mvmvif->phy_ctxt->channel) 3289 goto schedule_time_event; 3290 3291 cfg80211_chandef_create(&chandef, channel, NL80211_CHAN_NO_HT); 3292 3293 /* 3294 * Change the PHY context configuration as it is currently referenced 3295 * only by the P2P Device MAC 3296 */ 3297 if (mvmvif->phy_ctxt->ref == 1) { 3298 ret = iwl_mvm_phy_ctxt_changed(mvm, mvmvif->phy_ctxt, 3299 &chandef, 1, 1); 3300 if (ret) 3301 goto out_unlock; 3302 } else { 3303 /* 3304 * The PHY context is shared with other MACs. Need to remove the 3305 * P2P Device from the binding, allocate an new PHY context and 3306 * create a new binding 3307 */ 3308 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm); 3309 if (!phy_ctxt) { 3310 ret = -ENOSPC; 3311 goto out_unlock; 3312 } 3313 3314 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &chandef, 3315 1, 1); 3316 if (ret) { 3317 IWL_ERR(mvm, "Failed to change PHY context\n"); 3318 goto out_unlock; 3319 } 3320 3321 /* Unbind the P2P_DEVICE from the current PHY context */ 3322 ret = iwl_mvm_binding_remove_vif(mvm, vif); 3323 if (WARN(ret, "Failed unbinding P2P_DEVICE\n")) 3324 goto out_unlock; 3325 3326 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt); 3327 3328 /* Bind the P2P_DEVICE to the new allocated PHY context */ 3329 mvmvif->phy_ctxt = phy_ctxt; 3330 3331 ret = iwl_mvm_binding_add_vif(mvm, vif); 3332 if (WARN(ret, "Failed binding P2P_DEVICE\n")) 3333 goto out_unlock; 3334 3335 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt); 3336 } 3337 3338 schedule_time_event: 3339 /* Schedule the time events */ 3340 ret = iwl_mvm_start_p2p_roc(mvm, vif, duration, type); 3341 3342 out_unlock: 3343 mutex_unlock(&mvm->mutex); 3344 IWL_DEBUG_MAC80211(mvm, "leave\n"); 3345 return ret; 3346 } 3347 3348 static int iwl_mvm_cancel_roc(struct ieee80211_hw *hw) 3349 { 3350 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3351 3352 IWL_DEBUG_MAC80211(mvm, "enter\n"); 3353 3354 mutex_lock(&mvm->mutex); 3355 iwl_mvm_stop_roc(mvm); 3356 mutex_unlock(&mvm->mutex); 3357 3358 IWL_DEBUG_MAC80211(mvm, "leave\n"); 3359 return 0; 3360 } 3361 3362 static int __iwl_mvm_add_chanctx(struct iwl_mvm *mvm, 3363 struct ieee80211_chanctx_conf *ctx) 3364 { 3365 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv; 3366 struct iwl_mvm_phy_ctxt *phy_ctxt; 3367 int ret; 3368 3369 lockdep_assert_held(&mvm->mutex); 3370 3371 IWL_DEBUG_MAC80211(mvm, "Add channel context\n"); 3372 3373 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm); 3374 if (!phy_ctxt) { 3375 ret = -ENOSPC; 3376 goto out; 3377 } 3378 3379 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def, 3380 ctx->rx_chains_static, 3381 ctx->rx_chains_dynamic); 3382 if (ret) { 3383 IWL_ERR(mvm, "Failed to add PHY context\n"); 3384 goto out; 3385 } 3386 3387 iwl_mvm_phy_ctxt_ref(mvm, phy_ctxt); 3388 *phy_ctxt_id = phy_ctxt->id; 3389 out: 3390 return ret; 3391 } 3392 3393 static int iwl_mvm_add_chanctx(struct ieee80211_hw *hw, 3394 struct ieee80211_chanctx_conf *ctx) 3395 { 3396 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3397 int ret; 3398 3399 mutex_lock(&mvm->mutex); 3400 ret = __iwl_mvm_add_chanctx(mvm, ctx); 3401 mutex_unlock(&mvm->mutex); 3402 3403 return ret; 3404 } 3405 3406 static void __iwl_mvm_remove_chanctx(struct iwl_mvm *mvm, 3407 struct ieee80211_chanctx_conf *ctx) 3408 { 3409 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv; 3410 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id]; 3411 3412 lockdep_assert_held(&mvm->mutex); 3413 3414 iwl_mvm_phy_ctxt_unref(mvm, phy_ctxt); 3415 } 3416 3417 static void iwl_mvm_remove_chanctx(struct ieee80211_hw *hw, 3418 struct ieee80211_chanctx_conf *ctx) 3419 { 3420 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3421 3422 mutex_lock(&mvm->mutex); 3423 __iwl_mvm_remove_chanctx(mvm, ctx); 3424 mutex_unlock(&mvm->mutex); 3425 } 3426 3427 static void iwl_mvm_change_chanctx(struct ieee80211_hw *hw, 3428 struct ieee80211_chanctx_conf *ctx, 3429 u32 changed) 3430 { 3431 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3432 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv; 3433 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id]; 3434 3435 if (WARN_ONCE((phy_ctxt->ref > 1) && 3436 (changed & ~(IEEE80211_CHANCTX_CHANGE_WIDTH | 3437 IEEE80211_CHANCTX_CHANGE_RX_CHAINS | 3438 IEEE80211_CHANCTX_CHANGE_RADAR | 3439 IEEE80211_CHANCTX_CHANGE_MIN_WIDTH)), 3440 "Cannot change PHY. Ref=%d, changed=0x%X\n", 3441 phy_ctxt->ref, changed)) 3442 return; 3443 3444 mutex_lock(&mvm->mutex); 3445 iwl_mvm_bt_coex_vif_change(mvm); 3446 iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def, 3447 ctx->rx_chains_static, 3448 ctx->rx_chains_dynamic); 3449 mutex_unlock(&mvm->mutex); 3450 } 3451 3452 static int __iwl_mvm_assign_vif_chanctx(struct iwl_mvm *mvm, 3453 struct ieee80211_vif *vif, 3454 struct ieee80211_chanctx_conf *ctx, 3455 bool switching_chanctx) 3456 { 3457 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv; 3458 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id]; 3459 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3460 int ret; 3461 3462 lockdep_assert_held(&mvm->mutex); 3463 3464 mvmvif->phy_ctxt = phy_ctxt; 3465 3466 switch (vif->type) { 3467 case NL80211_IFTYPE_AP: 3468 /* only needed if we're switching chanctx (i.e. during CSA) */ 3469 if (switching_chanctx) { 3470 mvmvif->ap_ibss_active = true; 3471 break; 3472 } 3473 case NL80211_IFTYPE_ADHOC: 3474 /* 3475 * The AP binding flow is handled as part of the start_ap flow 3476 * (in bss_info_changed), similarly for IBSS. 3477 */ 3478 ret = 0; 3479 goto out; 3480 case NL80211_IFTYPE_STATION: 3481 break; 3482 case NL80211_IFTYPE_MONITOR: 3483 /* always disable PS when a monitor interface is active */ 3484 mvmvif->ps_disabled = true; 3485 break; 3486 default: 3487 ret = -EINVAL; 3488 goto out; 3489 } 3490 3491 ret = iwl_mvm_binding_add_vif(mvm, vif); 3492 if (ret) 3493 goto out; 3494 3495 /* 3496 * Power state must be updated before quotas, 3497 * otherwise fw will complain. 3498 */ 3499 iwl_mvm_power_update_mac(mvm); 3500 3501 /* Setting the quota at this stage is only required for monitor 3502 * interfaces. For the other types, the bss_info changed flow 3503 * will handle quota settings. 3504 */ 3505 if (vif->type == NL80211_IFTYPE_MONITOR) { 3506 mvmvif->monitor_active = true; 3507 ret = iwl_mvm_update_quotas(mvm, false, NULL); 3508 if (ret) 3509 goto out_remove_binding; 3510 3511 ret = iwl_mvm_add_snif_sta(mvm, vif); 3512 if (ret) 3513 goto out_remove_binding; 3514 3515 } 3516 3517 /* Handle binding during CSA */ 3518 if (vif->type == NL80211_IFTYPE_AP) { 3519 iwl_mvm_update_quotas(mvm, false, NULL); 3520 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 3521 } 3522 3523 if (switching_chanctx && vif->type == NL80211_IFTYPE_STATION) { 3524 u32 duration = 2 * vif->bss_conf.beacon_int; 3525 3526 /* iwl_mvm_protect_session() reads directly from the 3527 * device (the system time), so make sure it is 3528 * available. 3529 */ 3530 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PROTECT_CSA); 3531 if (ret) 3532 goto out_remove_binding; 3533 3534 /* Protect the session to make sure we hear the first 3535 * beacon on the new channel. 3536 */ 3537 iwl_mvm_protect_session(mvm, vif, duration, duration, 3538 vif->bss_conf.beacon_int / 2, 3539 true); 3540 3541 iwl_mvm_unref(mvm, IWL_MVM_REF_PROTECT_CSA); 3542 3543 iwl_mvm_update_quotas(mvm, false, NULL); 3544 } 3545 3546 goto out; 3547 3548 out_remove_binding: 3549 iwl_mvm_binding_remove_vif(mvm, vif); 3550 iwl_mvm_power_update_mac(mvm); 3551 out: 3552 if (ret) 3553 mvmvif->phy_ctxt = NULL; 3554 return ret; 3555 } 3556 static int iwl_mvm_assign_vif_chanctx(struct ieee80211_hw *hw, 3557 struct ieee80211_vif *vif, 3558 struct ieee80211_chanctx_conf *ctx) 3559 { 3560 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3561 int ret; 3562 3563 mutex_lock(&mvm->mutex); 3564 ret = __iwl_mvm_assign_vif_chanctx(mvm, vif, ctx, false); 3565 mutex_unlock(&mvm->mutex); 3566 3567 return ret; 3568 } 3569 3570 static void __iwl_mvm_unassign_vif_chanctx(struct iwl_mvm *mvm, 3571 struct ieee80211_vif *vif, 3572 struct ieee80211_chanctx_conf *ctx, 3573 bool switching_chanctx) 3574 { 3575 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3576 struct ieee80211_vif *disabled_vif = NULL; 3577 3578 lockdep_assert_held(&mvm->mutex); 3579 3580 iwl_mvm_remove_time_event(mvm, mvmvif, &mvmvif->time_event_data); 3581 3582 switch (vif->type) { 3583 case NL80211_IFTYPE_ADHOC: 3584 goto out; 3585 case NL80211_IFTYPE_MONITOR: 3586 mvmvif->monitor_active = false; 3587 mvmvif->ps_disabled = false; 3588 iwl_mvm_rm_snif_sta(mvm, vif); 3589 break; 3590 case NL80211_IFTYPE_AP: 3591 /* This part is triggered only during CSA */ 3592 if (!switching_chanctx || !mvmvif->ap_ibss_active) 3593 goto out; 3594 3595 mvmvif->csa_countdown = false; 3596 3597 /* Set CS bit on all the stations */ 3598 iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, true); 3599 3600 /* Save blocked iface, the timeout is set on the next beacon */ 3601 rcu_assign_pointer(mvm->csa_tx_blocked_vif, vif); 3602 3603 mvmvif->ap_ibss_active = false; 3604 break; 3605 case NL80211_IFTYPE_STATION: 3606 if (!switching_chanctx) 3607 break; 3608 3609 disabled_vif = vif; 3610 3611 iwl_mvm_mac_ctxt_changed(mvm, vif, true, NULL); 3612 break; 3613 default: 3614 break; 3615 } 3616 3617 iwl_mvm_update_quotas(mvm, false, disabled_vif); 3618 iwl_mvm_binding_remove_vif(mvm, vif); 3619 3620 out: 3621 mvmvif->phy_ctxt = NULL; 3622 iwl_mvm_power_update_mac(mvm); 3623 } 3624 3625 static void iwl_mvm_unassign_vif_chanctx(struct ieee80211_hw *hw, 3626 struct ieee80211_vif *vif, 3627 struct ieee80211_chanctx_conf *ctx) 3628 { 3629 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3630 3631 mutex_lock(&mvm->mutex); 3632 __iwl_mvm_unassign_vif_chanctx(mvm, vif, ctx, false); 3633 mutex_unlock(&mvm->mutex); 3634 } 3635 3636 static int 3637 iwl_mvm_switch_vif_chanctx_swap(struct iwl_mvm *mvm, 3638 struct ieee80211_vif_chanctx_switch *vifs) 3639 { 3640 int ret; 3641 3642 mutex_lock(&mvm->mutex); 3643 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true); 3644 __iwl_mvm_remove_chanctx(mvm, vifs[0].old_ctx); 3645 3646 ret = __iwl_mvm_add_chanctx(mvm, vifs[0].new_ctx); 3647 if (ret) { 3648 IWL_ERR(mvm, "failed to add new_ctx during channel switch\n"); 3649 goto out_reassign; 3650 } 3651 3652 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx, 3653 true); 3654 if (ret) { 3655 IWL_ERR(mvm, 3656 "failed to assign new_ctx during channel switch\n"); 3657 goto out_remove; 3658 } 3659 3660 /* we don't support TDLS during DCM - can be caused by channel switch */ 3661 if (iwl_mvm_phy_ctx_count(mvm) > 1) 3662 iwl_mvm_teardown_tdls_peers(mvm); 3663 3664 goto out; 3665 3666 out_remove: 3667 __iwl_mvm_remove_chanctx(mvm, vifs[0].new_ctx); 3668 3669 out_reassign: 3670 if (__iwl_mvm_add_chanctx(mvm, vifs[0].old_ctx)) { 3671 IWL_ERR(mvm, "failed to add old_ctx back after failure.\n"); 3672 goto out_restart; 3673 } 3674 3675 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, 3676 true)) { 3677 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n"); 3678 goto out_restart; 3679 } 3680 3681 goto out; 3682 3683 out_restart: 3684 /* things keep failing, better restart the hw */ 3685 iwl_mvm_nic_restart(mvm, false); 3686 3687 out: 3688 mutex_unlock(&mvm->mutex); 3689 3690 return ret; 3691 } 3692 3693 static int 3694 iwl_mvm_switch_vif_chanctx_reassign(struct iwl_mvm *mvm, 3695 struct ieee80211_vif_chanctx_switch *vifs) 3696 { 3697 int ret; 3698 3699 mutex_lock(&mvm->mutex); 3700 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true); 3701 3702 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx, 3703 true); 3704 if (ret) { 3705 IWL_ERR(mvm, 3706 "failed to assign new_ctx during channel switch\n"); 3707 goto out_reassign; 3708 } 3709 3710 goto out; 3711 3712 out_reassign: 3713 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, 3714 true)) { 3715 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n"); 3716 goto out_restart; 3717 } 3718 3719 goto out; 3720 3721 out_restart: 3722 /* things keep failing, better restart the hw */ 3723 iwl_mvm_nic_restart(mvm, false); 3724 3725 out: 3726 mutex_unlock(&mvm->mutex); 3727 3728 return ret; 3729 } 3730 3731 static int iwl_mvm_switch_vif_chanctx(struct ieee80211_hw *hw, 3732 struct ieee80211_vif_chanctx_switch *vifs, 3733 int n_vifs, 3734 enum ieee80211_chanctx_switch_mode mode) 3735 { 3736 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3737 int ret; 3738 3739 /* we only support a single-vif right now */ 3740 if (n_vifs > 1) 3741 return -EOPNOTSUPP; 3742 3743 switch (mode) { 3744 case CHANCTX_SWMODE_SWAP_CONTEXTS: 3745 ret = iwl_mvm_switch_vif_chanctx_swap(mvm, vifs); 3746 break; 3747 case CHANCTX_SWMODE_REASSIGN_VIF: 3748 ret = iwl_mvm_switch_vif_chanctx_reassign(mvm, vifs); 3749 break; 3750 default: 3751 ret = -EOPNOTSUPP; 3752 break; 3753 } 3754 3755 return ret; 3756 } 3757 3758 static int iwl_mvm_tx_last_beacon(struct ieee80211_hw *hw) 3759 { 3760 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3761 3762 return mvm->ibss_manager; 3763 } 3764 3765 static int iwl_mvm_set_tim(struct ieee80211_hw *hw, 3766 struct ieee80211_sta *sta, 3767 bool set) 3768 { 3769 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3770 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta); 3771 3772 if (!mvm_sta || !mvm_sta->vif) { 3773 IWL_ERR(mvm, "Station is not associated to a vif\n"); 3774 return -EINVAL; 3775 } 3776 3777 return iwl_mvm_mac_ctxt_beacon_changed(mvm, mvm_sta->vif); 3778 } 3779 3780 #ifdef CONFIG_NL80211_TESTMODE 3781 static const struct nla_policy iwl_mvm_tm_policy[IWL_MVM_TM_ATTR_MAX + 1] = { 3782 [IWL_MVM_TM_ATTR_CMD] = { .type = NLA_U32 }, 3783 [IWL_MVM_TM_ATTR_NOA_DURATION] = { .type = NLA_U32 }, 3784 [IWL_MVM_TM_ATTR_BEACON_FILTER_STATE] = { .type = NLA_U32 }, 3785 }; 3786 3787 static int __iwl_mvm_mac_testmode_cmd(struct iwl_mvm *mvm, 3788 struct ieee80211_vif *vif, 3789 void *data, int len) 3790 { 3791 struct nlattr *tb[IWL_MVM_TM_ATTR_MAX + 1]; 3792 int err; 3793 u32 noa_duration; 3794 3795 err = nla_parse(tb, IWL_MVM_TM_ATTR_MAX, data, len, iwl_mvm_tm_policy, 3796 NULL); 3797 if (err) 3798 return err; 3799 3800 if (!tb[IWL_MVM_TM_ATTR_CMD]) 3801 return -EINVAL; 3802 3803 switch (nla_get_u32(tb[IWL_MVM_TM_ATTR_CMD])) { 3804 case IWL_MVM_TM_CMD_SET_NOA: 3805 if (!vif || vif->type != NL80211_IFTYPE_AP || !vif->p2p || 3806 !vif->bss_conf.enable_beacon || 3807 !tb[IWL_MVM_TM_ATTR_NOA_DURATION]) 3808 return -EINVAL; 3809 3810 noa_duration = nla_get_u32(tb[IWL_MVM_TM_ATTR_NOA_DURATION]); 3811 if (noa_duration >= vif->bss_conf.beacon_int) 3812 return -EINVAL; 3813 3814 mvm->noa_duration = noa_duration; 3815 mvm->noa_vif = vif; 3816 3817 return iwl_mvm_update_quotas(mvm, false, NULL); 3818 case IWL_MVM_TM_CMD_SET_BEACON_FILTER: 3819 /* must be associated client vif - ignore authorized */ 3820 if (!vif || vif->type != NL80211_IFTYPE_STATION || 3821 !vif->bss_conf.assoc || !vif->bss_conf.dtim_period || 3822 !tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE]) 3823 return -EINVAL; 3824 3825 if (nla_get_u32(tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE])) 3826 return iwl_mvm_enable_beacon_filter(mvm, vif, 0); 3827 return iwl_mvm_disable_beacon_filter(mvm, vif, 0); 3828 } 3829 3830 return -EOPNOTSUPP; 3831 } 3832 3833 static int iwl_mvm_mac_testmode_cmd(struct ieee80211_hw *hw, 3834 struct ieee80211_vif *vif, 3835 void *data, int len) 3836 { 3837 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3838 int err; 3839 3840 mutex_lock(&mvm->mutex); 3841 err = __iwl_mvm_mac_testmode_cmd(mvm, vif, data, len); 3842 mutex_unlock(&mvm->mutex); 3843 3844 return err; 3845 } 3846 #endif 3847 3848 static void iwl_mvm_channel_switch(struct ieee80211_hw *hw, 3849 struct ieee80211_vif *vif, 3850 struct ieee80211_channel_switch *chsw) 3851 { 3852 /* By implementing this operation, we prevent mac80211 from 3853 * starting its own channel switch timer, so that we can call 3854 * ieee80211_chswitch_done() ourselves at the right time 3855 * (which is when the absence time event starts). 3856 */ 3857 3858 IWL_DEBUG_MAC80211(IWL_MAC80211_GET_MVM(hw), 3859 "dummy channel switch op\n"); 3860 } 3861 3862 static int iwl_mvm_pre_channel_switch(struct ieee80211_hw *hw, 3863 struct ieee80211_vif *vif, 3864 struct ieee80211_channel_switch *chsw) 3865 { 3866 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3867 struct ieee80211_vif *csa_vif; 3868 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3869 u32 apply_time; 3870 int ret; 3871 3872 mutex_lock(&mvm->mutex); 3873 3874 mvmvif->csa_failed = false; 3875 3876 IWL_DEBUG_MAC80211(mvm, "pre CSA to freq %d\n", 3877 chsw->chandef.center_freq1); 3878 3879 iwl_fw_dbg_trigger_simple_stop(mvm, vif, FW_DBG_TRIGGER_CHANNEL_SWITCH); 3880 3881 switch (vif->type) { 3882 case NL80211_IFTYPE_AP: 3883 csa_vif = 3884 rcu_dereference_protected(mvm->csa_vif, 3885 lockdep_is_held(&mvm->mutex)); 3886 if (WARN_ONCE(csa_vif && csa_vif->csa_active, 3887 "Another CSA is already in progress")) { 3888 ret = -EBUSY; 3889 goto out_unlock; 3890 } 3891 3892 /* we still didn't unblock tx. prevent new CS meanwhile */ 3893 if (rcu_dereference_protected(mvm->csa_tx_blocked_vif, 3894 lockdep_is_held(&mvm->mutex))) { 3895 ret = -EBUSY; 3896 goto out_unlock; 3897 } 3898 3899 rcu_assign_pointer(mvm->csa_vif, vif); 3900 3901 if (WARN_ONCE(mvmvif->csa_countdown, 3902 "Previous CSA countdown didn't complete")) { 3903 ret = -EBUSY; 3904 goto out_unlock; 3905 } 3906 3907 mvmvif->csa_target_freq = chsw->chandef.chan->center_freq; 3908 3909 break; 3910 case NL80211_IFTYPE_STATION: 3911 if (mvmvif->lqm_active) 3912 iwl_mvm_send_lqm_cmd(vif, 3913 LQM_CMD_OPERATION_STOP_MEASUREMENT, 3914 0, 0); 3915 3916 /* Schedule the time event to a bit before beacon 1, 3917 * to make sure we're in the new channel when the 3918 * GO/AP arrives. 3919 */ 3920 apply_time = chsw->device_timestamp + 3921 ((vif->bss_conf.beacon_int * (chsw->count - 1) - 3922 IWL_MVM_CHANNEL_SWITCH_TIME_CLIENT) * 1024); 3923 3924 if (chsw->block_tx) 3925 iwl_mvm_csa_client_absent(mvm, vif); 3926 3927 iwl_mvm_schedule_csa_period(mvm, vif, vif->bss_conf.beacon_int, 3928 apply_time); 3929 if (mvmvif->bf_data.bf_enabled) { 3930 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0); 3931 if (ret) 3932 goto out_unlock; 3933 } 3934 3935 break; 3936 default: 3937 break; 3938 } 3939 3940 mvmvif->ps_disabled = true; 3941 3942 ret = iwl_mvm_power_update_ps(mvm); 3943 if (ret) 3944 goto out_unlock; 3945 3946 /* we won't be on this channel any longer */ 3947 iwl_mvm_teardown_tdls_peers(mvm); 3948 3949 out_unlock: 3950 mutex_unlock(&mvm->mutex); 3951 3952 return ret; 3953 } 3954 3955 static int iwl_mvm_post_channel_switch(struct ieee80211_hw *hw, 3956 struct ieee80211_vif *vif) 3957 { 3958 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3959 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3960 int ret; 3961 3962 mutex_lock(&mvm->mutex); 3963 3964 if (mvmvif->csa_failed) { 3965 mvmvif->csa_failed = false; 3966 ret = -EIO; 3967 goto out_unlock; 3968 } 3969 3970 if (vif->type == NL80211_IFTYPE_STATION) { 3971 struct iwl_mvm_sta *mvmsta; 3972 3973 mvmsta = iwl_mvm_sta_from_staid_protected(mvm, 3974 mvmvif->ap_sta_id); 3975 3976 if (WARN_ON(!mvmsta)) { 3977 ret = -EIO; 3978 goto out_unlock; 3979 } 3980 3981 iwl_mvm_sta_modify_disable_tx(mvm, mvmsta, false); 3982 3983 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 3984 3985 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0); 3986 if (ret) 3987 goto out_unlock; 3988 3989 iwl_mvm_stop_session_protection(mvm, vif); 3990 } 3991 3992 mvmvif->ps_disabled = false; 3993 3994 ret = iwl_mvm_power_update_ps(mvm); 3995 3996 out_unlock: 3997 mutex_unlock(&mvm->mutex); 3998 3999 return ret; 4000 } 4001 4002 static void iwl_mvm_mac_flush(struct ieee80211_hw *hw, 4003 struct ieee80211_vif *vif, u32 queues, bool drop) 4004 { 4005 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 4006 struct iwl_mvm_vif *mvmvif; 4007 struct iwl_mvm_sta *mvmsta; 4008 struct ieee80211_sta *sta; 4009 int i; 4010 u32 msk = 0; 4011 4012 if (!vif || vif->type != NL80211_IFTYPE_STATION) 4013 return; 4014 4015 /* Make sure we're done with the deferred traffic before flushing */ 4016 if (iwl_mvm_is_dqa_supported(mvm)) 4017 flush_work(&mvm->add_stream_wk); 4018 4019 mutex_lock(&mvm->mutex); 4020 mvmvif = iwl_mvm_vif_from_mac80211(vif); 4021 4022 /* flush the AP-station and all TDLS peers */ 4023 for (i = 0; i < ARRAY_SIZE(mvm->fw_id_to_mac_id); i++) { 4024 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[i], 4025 lockdep_is_held(&mvm->mutex)); 4026 if (IS_ERR_OR_NULL(sta)) 4027 continue; 4028 4029 mvmsta = iwl_mvm_sta_from_mac80211(sta); 4030 if (mvmsta->vif != vif) 4031 continue; 4032 4033 /* make sure only TDLS peers or the AP are flushed */ 4034 WARN_ON(i != mvmvif->ap_sta_id && !sta->tdls); 4035 4036 if (drop) { 4037 if (iwl_mvm_flush_sta(mvm, mvmsta, false, 0)) 4038 IWL_ERR(mvm, "flush request fail\n"); 4039 } else { 4040 msk |= mvmsta->tfd_queue_msk; 4041 if (iwl_mvm_has_new_tx_api(mvm)) 4042 iwl_mvm_wait_sta_queues_empty(mvm, mvmsta); 4043 } 4044 } 4045 4046 mutex_unlock(&mvm->mutex); 4047 4048 /* this can take a while, and we may need/want other operations 4049 * to succeed while doing this, so do it without the mutex held 4050 */ 4051 if (!drop && !iwl_mvm_has_new_tx_api(mvm)) 4052 iwl_trans_wait_tx_queues_empty(mvm->trans, msk); 4053 } 4054 4055 static int iwl_mvm_mac_get_survey(struct ieee80211_hw *hw, int idx, 4056 struct survey_info *survey) 4057 { 4058 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 4059 int ret; 4060 4061 memset(survey, 0, sizeof(*survey)); 4062 4063 /* only support global statistics right now */ 4064 if (idx != 0) 4065 return -ENOENT; 4066 4067 if (!fw_has_capa(&mvm->fw->ucode_capa, 4068 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS)) 4069 return -ENOENT; 4070 4071 mutex_lock(&mvm->mutex); 4072 4073 if (iwl_mvm_firmware_running(mvm)) { 4074 ret = iwl_mvm_request_statistics(mvm, false); 4075 if (ret) 4076 goto out; 4077 } 4078 4079 survey->filled = SURVEY_INFO_TIME | 4080 SURVEY_INFO_TIME_RX | 4081 SURVEY_INFO_TIME_TX | 4082 SURVEY_INFO_TIME_SCAN; 4083 survey->time = mvm->accu_radio_stats.on_time_rf + 4084 mvm->radio_stats.on_time_rf; 4085 do_div(survey->time, USEC_PER_MSEC); 4086 4087 survey->time_rx = mvm->accu_radio_stats.rx_time + 4088 mvm->radio_stats.rx_time; 4089 do_div(survey->time_rx, USEC_PER_MSEC); 4090 4091 survey->time_tx = mvm->accu_radio_stats.tx_time + 4092 mvm->radio_stats.tx_time; 4093 do_div(survey->time_tx, USEC_PER_MSEC); 4094 4095 survey->time_scan = mvm->accu_radio_stats.on_time_scan + 4096 mvm->radio_stats.on_time_scan; 4097 do_div(survey->time_scan, USEC_PER_MSEC); 4098 4099 ret = 0; 4100 out: 4101 mutex_unlock(&mvm->mutex); 4102 return ret; 4103 } 4104 4105 static void iwl_mvm_mac_sta_statistics(struct ieee80211_hw *hw, 4106 struct ieee80211_vif *vif, 4107 struct ieee80211_sta *sta, 4108 struct station_info *sinfo) 4109 { 4110 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 4111 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 4112 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); 4113 4114 if (mvmsta->avg_energy) { 4115 sinfo->signal_avg = mvmsta->avg_energy; 4116 sinfo->filled |= BIT(NL80211_STA_INFO_SIGNAL_AVG); 4117 } 4118 4119 if (!fw_has_capa(&mvm->fw->ucode_capa, 4120 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS)) 4121 return; 4122 4123 /* if beacon filtering isn't on mac80211 does it anyway */ 4124 if (!(vif->driver_flags & IEEE80211_VIF_BEACON_FILTER)) 4125 return; 4126 4127 if (!vif->bss_conf.assoc) 4128 return; 4129 4130 mutex_lock(&mvm->mutex); 4131 4132 if (mvmvif->ap_sta_id != mvmsta->sta_id) 4133 goto unlock; 4134 4135 if (iwl_mvm_request_statistics(mvm, false)) 4136 goto unlock; 4137 4138 sinfo->rx_beacon = mvmvif->beacon_stats.num_beacons + 4139 mvmvif->beacon_stats.accu_num_beacons; 4140 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_RX); 4141 if (mvmvif->beacon_stats.avg_signal) { 4142 /* firmware only reports a value after RXing a few beacons */ 4143 sinfo->rx_beacon_signal_avg = mvmvif->beacon_stats.avg_signal; 4144 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_SIGNAL_AVG); 4145 } 4146 unlock: 4147 mutex_unlock(&mvm->mutex); 4148 } 4149 4150 static void iwl_mvm_event_mlme_callback(struct iwl_mvm *mvm, 4151 struct ieee80211_vif *vif, 4152 const struct ieee80211_event *event) 4153 { 4154 #define CHECK_MLME_TRIGGER(_cnt, _fmt...) \ 4155 do { \ 4156 if ((trig_mlme->_cnt) && --(trig_mlme->_cnt)) \ 4157 break; \ 4158 iwl_mvm_fw_dbg_collect_trig(mvm, trig, _fmt); \ 4159 } while (0) 4160 4161 struct iwl_fw_dbg_trigger_tlv *trig; 4162 struct iwl_fw_dbg_trigger_mlme *trig_mlme; 4163 4164 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_MLME)) 4165 return; 4166 4167 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_MLME); 4168 trig_mlme = (void *)trig->data; 4169 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 4170 return; 4171 4172 if (event->u.mlme.data == ASSOC_EVENT) { 4173 if (event->u.mlme.status == MLME_DENIED) 4174 CHECK_MLME_TRIGGER(stop_assoc_denied, 4175 "DENIED ASSOC: reason %d", 4176 event->u.mlme.reason); 4177 else if (event->u.mlme.status == MLME_TIMEOUT) 4178 CHECK_MLME_TRIGGER(stop_assoc_timeout, 4179 "ASSOC TIMEOUT"); 4180 } else if (event->u.mlme.data == AUTH_EVENT) { 4181 if (event->u.mlme.status == MLME_DENIED) 4182 CHECK_MLME_TRIGGER(stop_auth_denied, 4183 "DENIED AUTH: reason %d", 4184 event->u.mlme.reason); 4185 else if (event->u.mlme.status == MLME_TIMEOUT) 4186 CHECK_MLME_TRIGGER(stop_auth_timeout, 4187 "AUTH TIMEOUT"); 4188 } else if (event->u.mlme.data == DEAUTH_RX_EVENT) { 4189 CHECK_MLME_TRIGGER(stop_rx_deauth, 4190 "DEAUTH RX %d", event->u.mlme.reason); 4191 } else if (event->u.mlme.data == DEAUTH_TX_EVENT) { 4192 CHECK_MLME_TRIGGER(stop_tx_deauth, 4193 "DEAUTH TX %d", event->u.mlme.reason); 4194 } 4195 #undef CHECK_MLME_TRIGGER 4196 } 4197 4198 static void iwl_mvm_event_bar_rx_callback(struct iwl_mvm *mvm, 4199 struct ieee80211_vif *vif, 4200 const struct ieee80211_event *event) 4201 { 4202 struct iwl_fw_dbg_trigger_tlv *trig; 4203 struct iwl_fw_dbg_trigger_ba *ba_trig; 4204 4205 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA)) 4206 return; 4207 4208 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA); 4209 ba_trig = (void *)trig->data; 4210 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 4211 return; 4212 4213 if (!(le16_to_cpu(ba_trig->rx_bar) & BIT(event->u.ba.tid))) 4214 return; 4215 4216 iwl_mvm_fw_dbg_collect_trig(mvm, trig, 4217 "BAR received from %pM, tid %d, ssn %d", 4218 event->u.ba.sta->addr, event->u.ba.tid, 4219 event->u.ba.ssn); 4220 } 4221 4222 static void 4223 iwl_mvm_event_frame_timeout_callback(struct iwl_mvm *mvm, 4224 struct ieee80211_vif *vif, 4225 const struct ieee80211_event *event) 4226 { 4227 struct iwl_fw_dbg_trigger_tlv *trig; 4228 struct iwl_fw_dbg_trigger_ba *ba_trig; 4229 4230 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA)) 4231 return; 4232 4233 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA); 4234 ba_trig = (void *)trig->data; 4235 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 4236 return; 4237 4238 if (!(le16_to_cpu(ba_trig->frame_timeout) & BIT(event->u.ba.tid))) 4239 return; 4240 4241 iwl_mvm_fw_dbg_collect_trig(mvm, trig, 4242 "Frame from %pM timed out, tid %d", 4243 event->u.ba.sta->addr, event->u.ba.tid); 4244 } 4245 4246 static void iwl_mvm_mac_event_callback(struct ieee80211_hw *hw, 4247 struct ieee80211_vif *vif, 4248 const struct ieee80211_event *event) 4249 { 4250 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 4251 4252 switch (event->type) { 4253 case MLME_EVENT: 4254 iwl_mvm_event_mlme_callback(mvm, vif, event); 4255 break; 4256 case BAR_RX_EVENT: 4257 iwl_mvm_event_bar_rx_callback(mvm, vif, event); 4258 break; 4259 case BA_FRAME_TIMEOUT: 4260 iwl_mvm_event_frame_timeout_callback(mvm, vif, event); 4261 break; 4262 default: 4263 break; 4264 } 4265 } 4266 4267 void iwl_mvm_sync_rx_queues_internal(struct iwl_mvm *mvm, 4268 struct iwl_mvm_internal_rxq_notif *notif, 4269 u32 size) 4270 { 4271 u32 qmask = BIT(mvm->trans->num_rx_queues) - 1; 4272 int ret; 4273 4274 lockdep_assert_held(&mvm->mutex); 4275 4276 /* TODO - remove a000 disablement when we have RXQ config API */ 4277 if (!iwl_mvm_has_new_rx_api(mvm) || iwl_mvm_has_new_tx_api(mvm)) 4278 return; 4279 4280 notif->cookie = mvm->queue_sync_cookie; 4281 4282 if (notif->sync) 4283 atomic_set(&mvm->queue_sync_counter, 4284 mvm->trans->num_rx_queues); 4285 4286 ret = iwl_mvm_notify_rx_queue(mvm, qmask, (u8 *)notif, size); 4287 if (ret) { 4288 IWL_ERR(mvm, "Failed to trigger RX queues sync (%d)\n", ret); 4289 goto out; 4290 } 4291 4292 if (notif->sync) { 4293 ret = wait_event_timeout(mvm->rx_sync_waitq, 4294 atomic_read(&mvm->queue_sync_counter) == 0 || 4295 iwl_mvm_is_radio_killed(mvm), 4296 HZ); 4297 WARN_ON_ONCE(!ret && !iwl_mvm_is_radio_killed(mvm)); 4298 } 4299 4300 out: 4301 atomic_set(&mvm->queue_sync_counter, 0); 4302 mvm->queue_sync_cookie++; 4303 } 4304 4305 static void iwl_mvm_sync_rx_queues(struct ieee80211_hw *hw) 4306 { 4307 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 4308 struct iwl_mvm_internal_rxq_notif data = { 4309 .type = IWL_MVM_RXQ_EMPTY, 4310 .sync = 1, 4311 }; 4312 4313 mutex_lock(&mvm->mutex); 4314 iwl_mvm_sync_rx_queues_internal(mvm, &data, sizeof(data)); 4315 mutex_unlock(&mvm->mutex); 4316 } 4317 4318 const struct ieee80211_ops iwl_mvm_hw_ops = { 4319 .tx = iwl_mvm_mac_tx, 4320 .ampdu_action = iwl_mvm_mac_ampdu_action, 4321 .start = iwl_mvm_mac_start, 4322 .reconfig_complete = iwl_mvm_mac_reconfig_complete, 4323 .stop = iwl_mvm_mac_stop, 4324 .add_interface = iwl_mvm_mac_add_interface, 4325 .remove_interface = iwl_mvm_mac_remove_interface, 4326 .config = iwl_mvm_mac_config, 4327 .prepare_multicast = iwl_mvm_prepare_multicast, 4328 .configure_filter = iwl_mvm_configure_filter, 4329 .config_iface_filter = iwl_mvm_config_iface_filter, 4330 .bss_info_changed = iwl_mvm_bss_info_changed, 4331 .hw_scan = iwl_mvm_mac_hw_scan, 4332 .cancel_hw_scan = iwl_mvm_mac_cancel_hw_scan, 4333 .sta_pre_rcu_remove = iwl_mvm_sta_pre_rcu_remove, 4334 .sta_state = iwl_mvm_mac_sta_state, 4335 .sta_notify = iwl_mvm_mac_sta_notify, 4336 .allow_buffered_frames = iwl_mvm_mac_allow_buffered_frames, 4337 .release_buffered_frames = iwl_mvm_mac_release_buffered_frames, 4338 .set_rts_threshold = iwl_mvm_mac_set_rts_threshold, 4339 .sta_rc_update = iwl_mvm_sta_rc_update, 4340 .conf_tx = iwl_mvm_mac_conf_tx, 4341 .mgd_prepare_tx = iwl_mvm_mac_mgd_prepare_tx, 4342 .mgd_protect_tdls_discover = iwl_mvm_mac_mgd_protect_tdls_discover, 4343 .flush = iwl_mvm_mac_flush, 4344 .sched_scan_start = iwl_mvm_mac_sched_scan_start, 4345 .sched_scan_stop = iwl_mvm_mac_sched_scan_stop, 4346 .set_key = iwl_mvm_mac_set_key, 4347 .update_tkip_key = iwl_mvm_mac_update_tkip_key, 4348 .remain_on_channel = iwl_mvm_roc, 4349 .cancel_remain_on_channel = iwl_mvm_cancel_roc, 4350 .add_chanctx = iwl_mvm_add_chanctx, 4351 .remove_chanctx = iwl_mvm_remove_chanctx, 4352 .change_chanctx = iwl_mvm_change_chanctx, 4353 .assign_vif_chanctx = iwl_mvm_assign_vif_chanctx, 4354 .unassign_vif_chanctx = iwl_mvm_unassign_vif_chanctx, 4355 .switch_vif_chanctx = iwl_mvm_switch_vif_chanctx, 4356 4357 .start_ap = iwl_mvm_start_ap_ibss, 4358 .stop_ap = iwl_mvm_stop_ap_ibss, 4359 .join_ibss = iwl_mvm_start_ap_ibss, 4360 .leave_ibss = iwl_mvm_stop_ap_ibss, 4361 4362 .tx_last_beacon = iwl_mvm_tx_last_beacon, 4363 4364 .set_tim = iwl_mvm_set_tim, 4365 4366 .channel_switch = iwl_mvm_channel_switch, 4367 .pre_channel_switch = iwl_mvm_pre_channel_switch, 4368 .post_channel_switch = iwl_mvm_post_channel_switch, 4369 4370 .tdls_channel_switch = iwl_mvm_tdls_channel_switch, 4371 .tdls_cancel_channel_switch = iwl_mvm_tdls_cancel_channel_switch, 4372 .tdls_recv_channel_switch = iwl_mvm_tdls_recv_channel_switch, 4373 4374 .event_callback = iwl_mvm_mac_event_callback, 4375 4376 .sync_rx_queues = iwl_mvm_sync_rx_queues, 4377 4378 CFG80211_TESTMODE_CMD(iwl_mvm_mac_testmode_cmd) 4379 4380 #ifdef CONFIG_PM_SLEEP 4381 /* look at d3.c */ 4382 .suspend = iwl_mvm_suspend, 4383 .resume = iwl_mvm_resume, 4384 .set_wakeup = iwl_mvm_set_wakeup, 4385 .set_rekey_data = iwl_mvm_set_rekey_data, 4386 #if IS_ENABLED(CONFIG_IPV6) 4387 .ipv6_addr_change = iwl_mvm_ipv6_addr_change, 4388 #endif 4389 .set_default_unicast_key = iwl_mvm_set_default_unicast_key, 4390 #endif 4391 .get_survey = iwl_mvm_mac_get_survey, 4392 .sta_statistics = iwl_mvm_mac_sta_statistics, 4393 }; 4394